Enforcement · Deputy Data Protection Ombudsman EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Aktia Pankki Oyj: Insufficient technical and organisational measures to ensure information security

€865,000 Fine
Aktia Pankki Oyj
FINLAND
Art. 5 GDPR Art. 25 GDPR Art. 32 GDPR
Data Breaches Security Access Controls Insurance Controllers Processing Agreement Supervisory Authorities Identification
Oct 23, 2025 Source

How it connects

Related across sources

Guidance EDPB Annual Report 2021 EDPB Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 EDPB Case Law SG Nürnberg - S 5 SF 65/24 DS Social Court Nuremberg Guidance Opinion 7/2024 on the draft decision of the German North Rhine Westphalia Supervisory Authority regarding the EU Cloud Service Data Protection (Auditor) certification criteria EDPB Literature The data subject’s right to access to information under GDPR and the right of the data controller to protect its know-how Przegląd Prawniczy Uniwersytetu im. Adam Mickiewicza Guidance Guidelines 01/2022 on data subject rights - Right of access EDPB

Full text

The Finish DPA has imposed a fine of EUR 865,000 on Aktia Pankki Oyj. The controller changed its strong authentication process in such a way that it no longer guaranteed adequate data security, resulting in a data breach.

Industry: Finance, Insurance and Consulting

Original document at the source www.finlex.fi

Similar Content