Bank employee
Not Available
Insufficient legal basis for data processing
Decision Date
January 1, 2021
Authority
Data Protection Authority of Schleswig-Holstein
DE
Sector
Finance, Insurance and Consulting
Country
DE
Law
GDPRStatus
FINALDescription
An employee of a bank had regularly accessed the bank account data of a bank customer for private purposes over a period of about a year.
Issues & Violations
Insufficient legal basis for data processing