Finland

Aktia Pankki Oyj

865,000 €

GDPR enforcement action by Deputy Data Protection Ombudsman on 2025-10-23.

Rank · Sector

#34

of 322 in Finance, Insurance and Consulting

Rank · Finland

of 27

Rank · All fines

#191

of 3,050

Case details

Authority: Deputy Data Protection Ombudsman
Date: 2025-10-23
Controller / Processor: Aktia Pankki Oyj
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) f) GDPR, Art. 25 (1) GDPR, Art. 32 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Finish DPA has imposed a fine of EUR 865,000 on Aktia Pankki Oyj. The controller changed its strong authentication process in such a way that it no longer guaranteed adequate data security, resulting in a data breach.

Open original source Links to the regulator's original publication or another source.