The personal data of thousands of citizens was purchased by a bank from 2007-2011. The personal data was purchased by two advertising companies and these were citizens with high incomes. For this reason, the Personal Data Protection Authority imposed a fine of 75,000 euros on this bank.
The Authority had previously conducted an ex officio inspection of the bank's premises, where it was found that files of commercial and financial interest had been purchased from two advertising companies. This was followed by an inspection of the advertising companies, from which the Authority received copies of invoices, computer hard drives, etc.
Among the files, a list was also found, the largest, which contained 52,864 names with an income of over 60,000 euros.
In more detail, the lists contained the tax identification numbers of the bank customer and his/her spouse, identity numbers, home addresses, mobile and landline telephone numbers, income and spouse's income, date of birth, patronymic, maiden name, etc.
The Authority ruled that the bank "purchased, kept on file and processed for its own financial purposes, lists of illegally collected personal data", in violation of the legislation on the protection of personal data.
In its decision, the Authority emphasizes that, in view of the gravity of the violation, the number of persons whose personal data was involved, the type of personal data, and the fact that the bank aimed to make a profit from all of this, it unanimously imposed a fine of 75,000 euros on the bank.
Finally, the Authority obliged the bank in question to destroy the lists of personal data it kept in the form of files.
Source AMPE
Source: koutipandoras.gr
