Bankia S.A.
€50,000
Non-compliance with general data processing principles
Дата принятия решения
28 августа 2020 г.
Авторитет
Spanish Data Protection Authority (aepd)
ES
Сектор
Finance, Insurance and Consulting
Страна
ES
Закон
GDPRСтатус
FINALОписание
The bank kept personal data of a data subject for several years, even after the data subject was no longer a customer. The data was also accessible to bank employees during this time. This constituted a violation of the principle of purpose limitation.
Юридические цитаты
Art. 5 (1)
Проблемы и нарушения
Non-compliance with general data processing principles