Anonymous
- Country
- Czech Republic
- Fine
- 80,000 CZK
- Date
- 2019-05-13
- Sector
- -
- Articles
- Article 5 (1) a), b)Article 32 (1)
Inadequate legal basis for data processing and inadequate technical and organisational measures to guarantee information security
The Czech Data Protection Authority found that the controller used personal data of his client without his knowledge to open a bank account and that he had therefore not complied with the purpose of the processing. <br />Furthermore, the controller did not ensure sufficient control of compliance with the relevant internal rules on personal data.