The Finnish supervisory authority fined Alektum Oy following numerous complaints. Data subjects alleged that the company did not respond to requests for access to their data.
As a result of the audit, the authority found that Alektum had engaged in serious misconduct. The company notoriously failed to respond to requests concerning the data subject’s data protection rights. The company tried to defend itself by arguing that it was now no longer actively processing personal data belonging to the complainants. However, the Finnish supervisory authority indicated that, despite this, the company should have exercised the right of access to the personal data it held.