Belgium

Bank

75,000 €

GDPR enforcement action by Belgian Data Protection Authority (APD) on 2021-12-16.

Rank · Sector

#105

of 322 in Finance, Insurance and Consulting

Rank · Belgium

#10

of 50

Rank · All fines

#559

of 3,042

Case details

Authority: Belgian Data Protection Authority (APD)
Date: 2021-12-16
Controller / Processor: Bank
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 38 (6) GDPR
Type of violation: Insufficient involvement of data protection officer

Summary

The Belgian DPA has imposed a fine of EUR 75,000 on a bank. The DPA identified a conflict of interest regarding the data protection officer. In addition to his work as data protection officer, he was also head of a department to which he had to report in his capacity as data protection officer. The DPA considered this to be a violation of Art. 38 (6) GDPR.

Open original source Links to the regulator's original publication or another source.