Bankia S.A.
€50,000
Non-compliance with general data processing principles
Beslissingsdatum
28 augustus 2020
Autoriteit
Spanish Data Protection Authority (aepd)
ES
Sector
Finance, Insurance and Consulting
Land
ES
Wet
GDPRStatus
FINALBeschrijving
The bank kept personal data of a data subject for several years, even after the data subject was no longer a customer. The data was also accessible to bank employees during this time. This constituted a violation of the principle of purpose limitation.
Juridische citaten
Art. 5 (1)
Problemen en overtredingen
Non-compliance with general data processing principles