National Bank of Greece

€20,000

Insufficient fulfilment of data subjects rights

決定日期

2021年8月26日

權限

Hellenic Data Protection Authority (HDPA)

GR

部門

Finance, Insurance and Consulting

國家

GR

法律

GDPR

狀態

FINAL

說明

The Hellenic DPA has imposed a fine of EUR 20,000 on the National Bank of Greece. A data subject had filed a complaint against a company and the bank after they failed to comply with his right to information. After returning a product he had purchased from a company, the data subject had asked the company via Facebook Messenger to inform him about the request to cancel his credit card statements sent electronically to the bank. However, the controller refused to comply, whereupon the data subject asserted the same right with the bank, which, however, did not provide him with a response.

法律引文

Art. 12 (1)Art. 15 (1)

問題與違規

Insufficient fulfilment of data subjects rights

保持最新的隱私權執法資訊

我們尊重您的隱私。每月一封電子郵件,無垃圾郵件,可隨時取消訂閱。