Bank
€75,000
Insufficient involvement of data protection officer
決定日期
2021年12月16日
權限
Belgian Data Protection Authority (APD)
BE
部門
Finance, Insurance and Consulting
國家
BG
法律
GDPR狀態
FINAL說明
The Belgian DPA has imposed a fine of EUR 75,000 on a bank. The DPA identified a conflict of interest regarding the data protection officer. In addition to his work as data protection officer, he was also head of a department to which he had to report in his capacity as data protection officer. The DPA considered this to be a violation of Art. 38 (6) GDPR.
法律引文
Art. 38 (6)
問題與違規
Insufficient involvement of data protection officer