Sanction RGPD Data Protection Authority of Ireland — Bank of Ireland 365 : 750 k€ (2023)

Autorité de contrôle
Data Protection Authority of Ireland
Pays
Irlande
Entreprise / secteur
Bank of Ireland 365
Montant de l'amende
750 k€
Date de la décision
27 février 2023
Fondement juridique
Art. 5 (1) f), Art. 32 (1)
Manquement
Mesures techniques et organisationnelles insuffisantes

Résumé des faits

The Irish DPA has fined Bank of Ireland 365 EUR 750,000. The bank had notified the DPA of 10 data breaches linked to the bank's app. Unauthorized persons had managed to gain access to the app as well as to other individuals' accounts. The DPA determined that this data breach was facilitated due to the bank's failure to implement appropriate technical and organizational measures to protect personal data.

Décision officielle

Data Protection Authority of Ireland

Évaluer votre conformité RGPD avec Data Comply One