A gentleman has a loan denied by the bank’s system that he has been a customer for many years. He is
disgusted, because the loan would make it possible to hold the wedding of his only granddaughter.
He contacts the bank and asks for explanations. He wants to know exactly why his loan was denied and based
on what information.
What right is required by the data subject according to the GDPR?
The General Data Protection Regulation (GDPR) is based on the principles of proportionality and subsidiarity.
What is the meaning of “proportionality” in this context?
A personal data breach has occurred, and the controller is writing a draft notification for the supervisory
authority. The following information is already in the notification:
- The nature of the personal data breach and its possible consequences.
- Information regarding the parties that can provide additional information about the data breach.
What other information must the controller provide?