Bank Millennium S.A

€78,000

Insufficient fulfilment of data breach notification obligations

決定日期

2021年10月14日

權限

Polish National Personal Data Protection Office (UODO)

PL

部門

Finance, Insurance and Consulting

國家

PL

法律

GDPR

狀態

FINAL

說明

The Polish DPA (UODO) has imposed a fine of EUR 78,000 on Bank Millennium S.A.. The UODO had become aware of a data protection breach following a complaint against the bank. It turned out that correspondence sent by the bank through a courier service containing personal data such as first name, last name, PESEL number, home address, account numbers and identification numbers of customers, had been lost. In this regard, the UODO found that the bank had failed to report the incident to the DPA and provide adequate notice to the data subjects.

法律引文

Art. 33 (1)Art. 34 (1)

問題與違規

Insufficient fulfilment of data breach notification obligations

保持最新的隱私權執法資訊

我們尊重您的隱私。每月一封電子郵件,無垃圾郵件,可隨時取消訂閱。