# DSK Bank: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Data Protection Commision of Bulgaria (KZLD)
- Date: 2019-08-28
- Original: https://www.enforcementtracker.com/ETid-72
- Canonical: https://overview.legal/posts/46187
- Topics: Personal Data, Insurance, Security, IP Address, Special Categories of Data, Types of Special Categories of Personal Data, Identification, Biometric Data, Biometric Data

## Summary

Leakage of personal data due to inadequate technical and organisational measures to ensure the protection of information security. Third parties had access to over 23000 credit records relating to over 33000 bank customers including personal data such as names, citizenships, identification numbers, adresses, copies of identity cards and biometric data.

## Full text

Leakage of personal data due to inadequate technical and organisational measures to ensure the protection of information security. Third parties had access to over 23000 credit records relating to over 33000 bank customers including personal data such as names, citizenships, identification numbers, adresses, copies of identity cards and biometric data.

GDPR Articles: Art. 32 GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/46187 · 2026-08-22