Bankia S.A.
€50,000
Non-compliance with general data processing principles
Tanggal Keputusan
28 Agustus 2020
Wewenang
Spanish Data Protection Authority (aepd)
ES
Sektor
Finance, Insurance and Consulting
Negara
ES
Hukum
GDPRStatus
FINALDeskripsi
The bank kept personal data of a data subject for several years, even after the data subject was no longer a customer. The data was also accessible to bank employees during this time. This constituted a violation of the principle of purpose limitation.
Kutipan Hukum
Art. 5 (1)
Masalah & Pelanggaran
Non-compliance with general data processing principles