Sanction RGPD Spanish Data Protection Authority (aepd) — BANKINTER, S.A. : 80 k€ (2022)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- BANKINTER, S.A.
- Montant de l'amende
- 80 k€
- Date de la décision
- 15 novembre 2022
- Fondement juridique
- Art. 5 (1) f), Art. 32 (1)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Spanish DPA has imposed a fine on BANKINTER, S.A.. A person had filed a complaint with the DPA as personal data of a third person were also displayed to them when accessing their bank account. The DPA found that the unauthorized disclosure of the third-party data occurred due to a lack of adequate technical and organizational measures to protect personal data at the bank. The original fine of EUR 100,000 was reduced to EUR 80,000 due to voluntary payment.