Bulgaria

DSK Bank

511,000 €

GDPR enforcement action by Data Protection Commision of Bulgaria (KZLD) on 2019-08-28.

Rank · Sector

#42

of 322 in Finance, Insurance and Consulting

Rank · Bulgaria

of 31

Rank · All fines

#235

of 3,042

Case details

Authority: Data Protection Commision of Bulgaria (KZLD)
Date: 2019-08-28
Controller / Processor: DSK Bank
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

Leakage of personal data due to inadequate technical and organisational measures to ensure the protection of information security. Third parties had access to over 23000 credit records relating to over 33000 bank customers including personal data such as names, citizenships, identification numbers, adresses, copies of identity cards and biometric data.

Open original source Links to the regulator's original publication or another source.