ING Bank Śląski
€4,323,250
Insufficient legal basis for data processing
Дата принятия решения
26 августа 2025 г.
Авторитет
Polish National Personal Data Protection Office (UODO)
PL
Сектор
Finance, Insurance and Consulting
Страна
PL
Закон
GDPRСтатус
FINALОписание
The Polish DPA has imposed a fine of EUR 4,323,250 on ING Bank Śląski. The controller scanned the identity documents of every customer and potential customer without a sufficient legal basis. The controller started to implement this procedure after an anti-money laundering law was introduced, but failed to assess the necessity of the data processing in each case.
Юридические цитаты
Art. 5 (1)Art. 6 (1)
Проблемы и нарушения
Insufficient legal basis for data processing