Bankia S.A.
€50,000
Non-compliance with general data processing principles
Ngày ra quyết định
28 tháng 8, 2020
Thẩm quyền
Spanish Data Protection Authority (aepd)
ES
Ngành
Finance, Insurance and Consulting
Quốc gia
ES
Luật
GDPRTrạng thái
FINALMô tả
The bank kept personal data of a data subject for several years, even after the data subject was no longer a customer. The data was also accessible to bank employees during this time. This constituted a violation of the principle of purpose limitation.
Trích dẫn pháp lý
Art. 5 (1)
Vấn đề & Vi phạm
Non-compliance with general data processing principles