UniCredit Bank
€3K($3K USD)final
Date Issued
1970-01-01
Regulation
Authority
Czech Data Protection Authority (UOOU)
Country
Czech Republic
Violation Type
Non-compliance with lawful basis for data processing
Currency
EUR
Violation Summary
UniCredit Bank opened a bank account for a person who has not requested any account to be opened. The bank allegedly had his personal data at their disposal because the affected person was responsible for closing a bank account operated by his employer. The bank was requested to prove that it had consent from the data subject to process his personal data but was unable to provide this proof.
Articles Violated
Art. 6 GDPR