Banco Bilbao Vizcaya Argentaria, S.A.

€800,000

Insufficient technical and organisational measures to ensure information security

Ημερομηνία απόφασης

20 Οκτωβρίου 2023

Αρχή

Spanish Data Protection Authority (aepd)

ES

Τομέας

Finance, Insurance and Consulting

Χώρα

ES

Νόμος

GDPR

Κατάσταση

FINAL

Περιγραφή

The Spanish DPA has fined BANCO BILBAO VIZCAYA ARGENTARIA, S.A. EUR 800,000. A customer had lost her handbag, which also contained her bank card. The individual therefore requested the controller to block all banking products. However, the controller failed to comply, which is why it was then possible for third parties to access the individual's bank products and transfer money under false identities. During its investigation, the DPA found that the controller had failed to implement appropriate technical and organizational measures to prevent such a case and protect personal data.

Νομικές παραπομπές

Art. 25Art. 32

Θέματα & Παραβάσεις

Insufficient technical and organisational measures to ensure information security

Μείνετε ενημερωμένοι για την επιβολή του απορρήτου

Σεβόμαστε την ιδιωτικότητά σας. Ένα email ανά μήνα, χωρίς spam, διαγραφή ανά πάσα στιγμή.