Sanction RGPD Spanish Data Protection Authority (aepd) — Bankia S.A. : 50 k€ (2020)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Bankia S.A.
- Montant de l'amende
- 50 k€
- Date de la décision
- 28 août 2020
- Fondement juridique
- Art. 5 (1) b)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The bank kept personal data of a data subject for several years, even after the data subject was no longer a customer. The data was also accessible to bank employees during this time. This constituted a violation of the principle of purpose limitation.