Enforcement
EN Bank: Insufficient involvement of data protection officer
€75,000 fine - Belgian Data Protection Authority (APD)
Content
The Belgian DPA has imposed a fine of EUR 75,000 on a bank. The DPA identified a conflict of interest regarding the data protection officer. In addition to his work as data protection officer, he was also head of a department to which he had to report in his capacity as data protection officer. The DPA considered this to be a violation of Art. 38 (6) GDPR.
GDPR Articles: Art. 38 (6) GDPR
Industry: Finance, Insurance and Consulting