Sanction RGPD Polish National Personal Data Protection Office (UODO) — ING Bank Śląski : 4,3 M€ (2025)
- Autorité de contrôle
- Polish National Personal Data Protection Office (UODO)
- Pays
- Pologne
- Entreprise / secteur
- ING Bank Śląski
- Montant de l'amende
- 4,3 M€
- Date de la décision
- 26 août 2025
- Fondement juridique
- Art. 5 (1) a), b), c), Art. 6 (1)
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Polish DPA has imposed a fine of EUR 4,323,250 on ING Bank Śląski. The controller scanned the identity documents of every customer and potential customer without a sufficient legal basis. The controller started to implement this procedure after an anti-money laundering law was introduced, but failed to assess the necessity of the data processing in each case.