Bank Millennium S.A

€78,000

Insufficient fulfilment of data breach notification obligations

Ημερομηνία απόφασης

14 Οκτωβρίου 2021

Αρχή

Polish National Personal Data Protection Office (UODO)

PL

Τομέας

Finance, Insurance and Consulting

Χώρα

PL

Νόμος

GDPR

Κατάσταση

FINAL

Περιγραφή

The Polish DPA (UODO) has imposed a fine of EUR 78,000 on Bank Millennium S.A.. The UODO had become aware of a data protection breach following a complaint against the bank. It turned out that correspondence sent by the bank through a courier service containing personal data such as first name, last name, PESEL number, home address, account numbers and identification numbers of customers, had been lost. In this regard, the UODO found that the bank had failed to report the incident to the DPA and provide adequate notice to the data subjects.

Νομικές παραπομπές

Art. 33 (1)Art. 34 (1)

Θέματα & Παραβάσεις

Insufficient fulfilment of data breach notification obligations

Μείνετε ενημερωμένοι για την επιβολή του απορρήτου

Σεβόμαστε την ιδιωτικότητά σας. Ένα email ανά μήνα, χωρίς spam, διαγραφή ανά πάσα στιγμή.