# Bank: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
- Date: 2019-02-08
- Original: https://www.enforcementtracker.com/ETid-33
- Canonical: https://overview.legal/posts/46148
- Topics: Personal Data, Insurance, IP Address, Processing

## Summary

A bank mistakenly sent SMS messages about a subject's credit card debt to the telephone number of another person. After receiving an incorrect telephone number from the client at the time of contracting, the bank did not comply with the data subject's request to erase the data and continued to send SMS message to the incorrect telephone number. The fine represents 0.0016% of the annual profit of the bank.

## Full text

A bank mistakenly sent SMS messages about a subject's credit card debt to the telephone number of another person. After receiving an incorrect telephone number from the client at the time of contracting, the bank did not comply with the data subject's request to erase the data and continued to send SMS message to the incorrect telephone number. The fine represents 0.0016% of the annual profit of the bank.

GDPR Articles: Art. 5 (1) d) GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/46148 · 2026-08-22