Bankia S.A.
€50,000
Non-compliance with general data processing principles
תאריך ההחלטה
28 באוגוסט 2020
סמכות
Spanish Data Protection Authority (aepd)
ES
סקטור
Finance, Insurance and Consulting
מדינה
ES
חוק
GDPRסטטוס
FINALתיאור
The bank kept personal data of a data subject for several years, even after the data subject was no longer a customer. The data was also accessible to bank employees during this time. This constituted a violation of the principle of purpose limitation.
ציטוטים משפטיים
Art. 5 (1)
בעיות והפרות
Non-compliance with general data processing principles