Dormeo Home Fined for Ignoring GDPR Opt-Out Requests

Written by AI from the linked story. Not reviewed by an editor. How this works

Dormeo Home S.R.L. continued sending marketing calls and SMS messages to a customer after they explicitly exercised their GDPR right to object, violating Article 21 of the Regulation. This failure demonstrates a breakdown in both process and systems — opt-out requests were not properly recorded, propagated, or enforced across marketing channels. The resulting €2,000 fine, while modest, signals that data protection authorities will act on individual complaints. Beyond financial penalties, such violations erode customer trust and expose organisations to reputational harm. Organisations must treat opt-out signals as legally binding instructions requiring immediate and verifiable action.

Tactical Insight

Immediate actions

Establish a centralised suppression list that is updated in real time whenever a customer submits an opt-out or objection request.
Halt all active marketing campaigns for any individual who has exercised their right to object until their status is confirmed across all channels.

Process & governance improvements

Implement documented procedures that require opt-out requests to be propagated to every marketing platform (email, SMS, call centre) within 24 hours.
Assign a dedicated Data Protection Officer or privacy owner accountable for monitoring and auditing opt-out compliance on a recurring basis.
Conduct regular staff training so that sales and marketing teams understand the legal obligations triggered by a GDPR Article 21 objection.

Detection & audit measures

Maintain detailed logs of all marketing consent and objection records with timestamps to demonstrate compliance during regulatory investigations.
Schedule quarterly audits of marketing contact lists against the suppression list to identify and remediate any leakage before it results in unlawful contact.