Enforcement · Deputy Data Protection Ombudsman NL LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Aktia Pankki Oyj: Onvoldoende technische en organisatorische maatregelen om de informatiebeveiliging te waarborgen.

865.000 euro boete - Waarnemend ombudsman gegevensbescherming.

865.000 euro boete - Waarnemend ombudsman gegevensbescherming.

€865,000 Fine
Aktia Pankki Oyj
FINLAND
Insufficient technical and organisational measures to ensure information security
Art. 5 GDPR Art. 25 GDPR Art. 32 GDPR
Financiële dienstverlening, verzekeringen en consultancy.
Security Privacy by Design Accountability Privacy by Default Data Breaches
Oct 23, 2025 Source finlex.fi

Full text

De Finse gegevensbeschermingsautoriteit heeft Aktia Pankki Oyj een boete van 865.000 euro opgelegd. De bank heeft haar proces voor sterke authenticatie zodanig gewijzigd dat het geen adequate gegevensbeveiliging meer garandeerde, wat heeft geleid tot een datalek.

Relevante artikelen van de AVG: Artikel 5 (1) f), Artikel 25 (1), Artikel 32 (1), (2)

Deze inhoud is automatisch vertaald met behulp van machinevertaling. De originele versie is beschikbaar in de brontaal.

How it connects

References

Related across sources

C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems C-311/18 (Schrems II) CJEU Jul 16, 2020 Privacy Shield Processing Agreement International Transfer
Guidelines 4/2019 Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Guidelines on data protection by design and by default Guidelines ·EDPB Oct 20, 2020 Privacy by Design & Default Privacy by Default Privacy by Design
C-362/14 Maximillian Schrems v Data Protection Commissioner C-362/14 (Schrems I) CJEU Oct 6, 2015 Privacy Shield Supervision IP Address
C-741/21 GP v juris GmbH In Case C-741/21, the Court of Justice of the European Union (Third Chamber) addressed a preliminary reference from the Landgericht Saarbrücken in proceedings between data subject… CJEU ·Third Chamber Apr 11, 2024 Liability Personal Data Integrity and Confidentiality Principle
C-807/21 Deutsche Wohnen SE v Staatsanwaltschaft Berlin C-807/21 (Deutsche Wohnen) CJEU Dec 5, 2023 Fines Public Authority Processors
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria German North Rhine Westphalia SA ·Opinion ·EDPB Apr 19, 2024 Certification Supervision Supervisory Authorities
Related documents