UODO (Poland) · 23 July 2025
Bank
Name not published.
About: Data principles, Unlawful processing
FinePLN18,416,400≈ €4,330,000Violation found
- Regulator
- UODO (Poland)
- Decided
- 23 July 2025
- Country
- Poland
- Sector
- Not given
- Regulator’s reference
- DKN.5112.6.2020
- Fino case number
- 2025/PL/020
What happened
The DPA fined a bank PLN 18,416,400 (approximately €4,300,000) over the excessive and unlawful processing of customers’ identity documents. The DPA clarified that AML legislation does not allow for the indiscriminate scanning of customers’ IDs.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a) · 5(1)(b) · 5(1)(c)Read →
- Art. 6Lawfulness of processing6(1)Read →
- Data principles
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/PL/020.