DSK Bank
€511,000
Insufficient technical and organisational measures to ensure information security
Ngày ra quyết định
28 tháng 8, 2019
Thẩm quyền
Data Protection Commision of Bulgaria (KZLD)
BG
Ngành
Finance, Insurance and Consulting
Quốc gia
BG
Luật
GDPRTrạng thái
FINALMô tả
Leakage of personal data due to inadequate technical and organisational measures to ensure the protection of information security. Third parties had access to over 23000 credit records relating to over 33000 bank customers including personal data such as names, citizenships, identification numbers, adresses, copies of identity cards and biometric data.
Trích dẫn pháp lý
Art. 32
Vấn đề & Vi phạm
Insufficient technical and organisational measures to ensure information security