The Dutch sta­te cre­dit agen­cy BKR (Bureau Kre­diet Regi­stra­te) is, accor­ding to reports (e.g. here) was char­ged with a fine of EUR 830,000. BKR appar­ent­ly pro­vi­ded infor­ma­ti­on at most once a year and against a writ­ten request (by mail) with a pass­port copy. More fre­quent and elec­tro­nic requests were only pos­si­ble for a small fee. Thus, the faci­li­ta­ti­on requi­re­ment of Art. 12 GDPR was violated.