Details:
| Summary | The bank established a personal bank account for a data subject without his consent or knowledge. The bank supposedly had his personal data available because the subject had disposed of his employer’s company account. The bank was not able to provide The Office for Personal Data Protection with the necessary documentation to prove entering into contract with the data subject. |
| Link: | link |
| Related articles: | Art. 6 GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 3,140 |
| Sector | Finance, Insurance and Consulting |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/