Finnish SA Fines Otavamedia for Deficiencies in the Implementation of Data Protection Rights

From 2018 to 2021, eleven cases concerning Otavamedia were brought to the Finnish SA. Among other things, the complainants had not received a response to their requests or enquiries concerning data protection rights.

According to the report by Otavamedia, some of the data protection requests had not been implemented due to a technical issue in the e-mail redirect when service providers were changed.

During the error situation, the messages that arrived in the e-mail inbox reserved for data protection issues had not been directed to customer service. The situation was only discovered due to the request for information by the Finnish SA. At that time, the situation had lasted for seven months.

The Finnish SA finds that Otavamedia should have taken care of the testing of the e-mail inbox because it was the main electronic contact channel of data subjects in data protection matters. 

Data subjects were also able to submit requests concerning their data with a printable form. The form required the person's signature for identification purposes. The Finnish SA finds that through this method, Otavamedia gathered an excessive amount of information for identification. 

The Finnish SA imposed an administrative fine of EUR 85,000 on the controller for deficiencies in the implementation of the rights of the data subject via the e-mail channel. SA also ordered the controller to correct its procedures to comply with the data protection regulations and stop using the signed form. Also, the company was issued a reprimand for neglecting the rights of the data subject.

You can reach further information here.

Kind regards,

Zumbul Attorneys at Law

info@zumbul.av.tr