The Dutch state credit agency BKR (Bureau Krediet Registrate) is, according to reports (e.g. here) was charged with a fine of EUR 830,000. BKR apparently provided information at most once a year and against a written request (by mail) with a passport copy. More frequent and electronic requests were only possible for a small fee. Thus, the facilitation requirement of Art. 12 GDPR was violated.