Bank
€75,000
Insufficient involvement of data protection officer
Ημερομηνία απόφασης
16 Δεκεμβρίου 2021
Αρχή
Belgian Data Protection Authority (APD)
BE
Τομέας
Finance, Insurance and Consulting
Χώρα
BG
Νόμος
GDPRΚατάσταση
FINALΠεριγραφή
The Belgian DPA has imposed a fine of EUR 75,000 on a bank. The DPA identified a conflict of interest regarding the data protection officer. In addition to his work as data protection officer, he was also head of a department to which he had to report in his capacity as data protection officer. The DPA considered this to be a violation of Art. 38 (6) GDPR.
Νομικές παραπομπές
Art. 38 (6)
Θέματα & Παραβάσεις
Insufficient involvement of data protection officer