Ireland

Bank of Ireland 365

750,000 €

GDPR enforcement action by Data Protection Authority of Ireland on 2023-02-27.

Rank · Sector

#39

of 322 in Finance, Insurance and Consulting

Rank · Ireland

#13

of 36

Rank · All fines

#203

of 3,042

Case details

Authority: Data Protection Authority of Ireland
Date: 2023-02-27
Controller / Processor: Bank of Ireland 365
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 (1) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Irish DPA has fined Bank of Ireland 365 EUR 750,000. The bank had notified the DPA of 10 data breaches linked to the bank's app. Unauthorized persons had managed to gain access to the app as well as to other individuals' accounts. The DPA determined that this data breach was facilitated due to the bank's failure to implement appropriate technical and organizational measures to protect personal data.

Open original source Links to the regulator's original publication or another source.