When personal information is used without authorisation to conclude contracts or misuse accounts under a false name, this is known as digital impersonation. Those affected often only realise the consequences when debits or reminders appear that they cannot explain.
Increasingly, victims are contacting data protection authorities after realising that their data has been used without their consent - for example to conclude contracts with insurers. If the deletion of this data is then requested, many companies invoke their contractual obligations and reject the request. According to current legal opinion, personal data can remain stored for as long as potential claims from the contractual relationship exist - even if this may have come about through fraud.
Nevertheless, those affected still have the right to request information about stored data - even if it was transmitted by the offender themselves.
Responsible handling of digital information helps to prevent such cases: Complex passwords, two-factor procedures, a watchful eye for fraudulent messages, economical use of personal data online and regular checks of your own account activity are essential measures. Keeping sensitive documents safe and blocking lost cards or IDs immediately are also among the basics.
In an emergency, act quickly, change access data, contact payment services - and file a criminal complaint if you suspect a criminal offence. In this way, damage can be limited and evidence secured.
Source: www.datenschutz-notizen.de