DSK Bank
€511,000
Insufficient technical and organisational measures to ensure information security
決定日期
2019年8月28日
權限
Data Protection Commision of Bulgaria (KZLD)
BG
部門
Finance, Insurance and Consulting
國家
BG
法律
GDPR狀態
FINAL說明
Leakage of personal data due to inadequate technical and organisational measures to ensure the protection of information security. Third parties had access to over 23000 credit records relating to over 33000 bank customers including personal data such as names, citizenships, identification numbers, adresses, copies of identity cards and biometric data.
法律引文
Art. 32
問題與違規
Insufficient technical and organisational measures to ensure information security