Location of Reported GDPR Violation:
Germany
Articles Violated:
- Article 32: A caller could obtain extensive information on personal customer data from the company's customer service department simply by entering a customer's name and date of birth. Due to the company's cooperation with the data protection authority, the fine imposed was at the lower end of the scale.
Source: enforcementtracker.com