Bank

€1,560

Non-compliance with general data processing principles

Decision Date

February 8, 2019

Authority

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)

HU

Sector

Finance, Insurance and Consulting

Country

BG

Law

GDPR

Status

FINAL

Description

A bank mistakenly sent SMS messages about a subject's credit card debt to the telephone number of another person. After receiving an incorrect telephone number from the client at the time of contracting, the bank did not comply with the data subject's request to erase the data and continued to send SMS message to the incorrect telephone number. The fine represents 0.0016% of the annual profit of the bank.

Legal Citations

Art. 5 (1)

Issues & Violations

Non-compliance with general data processing principles

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.