AEPD (Spain) · 10 October 2025
ING Bank N.V
About: Data security
Fine€500,000Violation found
- Regulator
- AEPD (Spain)
- Decided
- 10 October 2025
- Country
- Spain
- Sector
- Not given
- Regulator’s reference
- EXP202500113
- Fino case number
- 2025/ES/184
What happened
The DPA fined a bank €500,000 for losing a customer’s documents when transporting them via a courier. The DPA held that the bank failed to ensure adequate security and proper supervision of its processor under Article 32 GDPR.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/ES/184.