Bank
€100
Insufficient legal basis for data processing
Decision Date
August 5, 2020
Authority
Austrian Data Protection Authority (dsb)
AT
Sector
Finance, Insurance and Consulting
Country
BG
Law
GDPRStatus
FINALDescription
A bank employee made a copy of the identity card of a bank client who wanted to exchange EUR 100 in foreign currency and justified this with money laundering charges. However, these only apply to a sum of EUR 1000 and above.
Legal Citations
Art. 5Art. 6
Issues & Violations
Insufficient legal basis for data processing