Sanction RGPD Data Protection Commision of Bulgaria (KZLD) — DSK Bank : 511 k€ (2019)
- Autorité de contrôle
- Data Protection Commision of Bulgaria (KZLD)
- Pays
- Bulgarie
- Entreprise / secteur
- DSK Bank
- Montant de l'amende
- 511 k€
- Date de la décision
- 28 août 2019
- Fondement juridique
- Art. 32
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
Leakage of personal data due to inadequate technical and organisational measures to ensure the protection of information security. Third parties had access to over 23000 credit records relating to over 33000 bank customers including personal data such as names, citizenships, identification numbers, adresses, copies of identity cards and biometric data.