Fino

AEPD (Spain) · 3 January 2025

Banco Pichincha

About: Unlawful processing

Fine€50,000Violation found
Regulator
AEPD (Spain)
Decided
3 January 2025
Country
Spain
Sector
Not given
Regulator’s reference
EXP202303035
Fino case number
2025/ES/121
Export as PDF

What happened

The DPA fined a bank €50,000 after its processor unlawfully disclosed personal data of its customer to an impersonator even though the impersonator could not correctly answer identity verification questions.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

  • Unlawful processing

Sources

The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.

Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/ES/121.