Spain

ING BANK N.V., SUCURSAL EN ESPAÑA

1,600,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2025-03-14.

Rank · Sector

#20

of 322 in Finance, Insurance and Consulting

Rank · Spain

#21

of 1,075

Rank · All fines

#133

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2025-03-14
Controller / Processor: ING BANK N.V., SUCURSAL EN ESPAÑA
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish data protection authority (AEPD) has imposed a fine on ING BANK N.V., SUCURSAL EN ESPAÑA. As part of the verification process for new banking customers, ING carries out measures to identify the person. This process involves the processing of personal data and therefore requires a legal basis. The AEPD decided that there was no sufficient legal basis for a particular data matching. The original fine of EUR 2 million was reduced to EUR 1.6 million due to immediate payment.

Open original source Links to the regulator's original publication or another source.