Acting of publisher DPG does not justify GDPR fine

Amsterdam District Court August 10, 2023, IT 4351; ECLI:NL:RBAMS:2023:5074 (DPG Media/AP) Administrative law. In this case the District Court of Amsterdam rules on the appeal of DPG Media B.V. (hereinafter: DPG) against a fine imposed on it by the Personal Data Authority (hereinafter: AP). DPG is a publisher of magazines and books. It processes personal data of customers. If a data subject requests removal or inspection of their personal data, DPG first requests verification of the identity of the person concerned by providing proof of identity. The AP argues that this violates the AVG, because it creates an unnecessary barrier for data subjects. According to the AP, DPG does not apply customization since it does not assess whether an applicant can be identified in another, less intrusive way. DPG defends itself by arguing that its working method does not violate the AVG, since there was room for customization, and this was also applied in practice.The court ban (Machine translated)

https://www.itenrecht.nl/artikelen/handelen-dpg-rechtvaardigt-geen-boete