Sanction RGPD Spanish Data Protection Authority (aepd) — ING BANK N.V., SUCURSAL EN ESPAÑA : 1,6 M€ (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- ING BANK N.V., SUCURSAL EN ESPAÑA
- Montant de l'amende
- 1,6 M€
- Date de la décision
- 14 mars 2025
- Fondement juridique
- Art. 6 (1)
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Spanish data protection authority (AEPD) has imposed a fine on ING BANK N.V., SUCURSAL EN ESPAÑA. As part of the verification process for new banking customers, ING carries out measures to identify the person. This process involves the processing of personal data and therefore requires a legal basis. The AEPD decided that there was no sufficient legal basis for a particular data matching. The original fine of EUR 2 million was reduced to EUR 1.6 million due to immediate payment.