Bank
€72,500
Insufficient legal basis for data processing
วันที่ตัดสินใจ
5 ตุลาคม 2565
อำนาจ
Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
HU
ภาคส่วน
Finance, Insurance and Consulting
ประเทศ
BG
กฎหมาย
GDPRสถานะ
FINALคำอธิบาย
The Hungarian DPA has imposed a fine of EUR 72,500 on a bank. An individual had filed a complaint with the DPA. The bank had conducted a credit check on the individual based on a credit application. However, the bank later conducted a second credit check, although the individual had not requested a new credit offer. The DPA therefore found that this second credit check was carried out unlawfully due to the lack of a legal basis.
การอ้างอิงทางกฎหมาย
Art. 5 (2)Art. 6 (1)Art. 12 (1)
ปัญหาและการละเมิด
Insufficient legal basis for data processing