International Card Services B.V. – €150,000 Fine (Netherlands, 2024)

€150,000Autoriteit Persoonsgegevens15 January 2024Netherlands
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

International Card Services B.V. was fined EUR 150,000 for not conducting a required data protection impact assessment before starting to identify customers digitally. This is important because it shows that companies must evaluate risks to personal data before launching new services. Failing to do so can lead to significant financial penalties.

What happened

International Card Services B.V. failed to carry out a data protection impact assessment before starting digital identification of customers.

Who was affected

Around 1.5 million customers whose sensitive personal data, like pictures, were involved in the identity check were affected.

What the authority found

The Dutch DPA ruled that ICS did not meet its obligation to assess risks to personal data, violating GDPR's requirement for a data protection impact assessment.

Why this matters

This case highlights the necessity for companies to assess privacy risks before implementing new technologies. It serves as a reminder that neglecting data protection assessments can lead to hefty fines.

GDPR Articles Cited

AI-verified

Art. 35(GDPR)
View original scraped data
Art. 35 GDPR

Original data from scraper before AI verification against source document.

Source verified 6 March 2026
verified correct
Full Legal Summary
Detailed

The Dutch DPA has imposed a fine of EUR 150,000 on International Card Services B.V. (ICS). ICS failed to carry out a data protection impact assessment before starting the digital identification of customers in the Netherlands in 2019. The identity check covered around 1.5 million people and involved sensitive personal data such as pictures of the data subjects.

Related Enforcement Actions (0)

No other enforcement actions found for International Card Services B.V. in NL

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

15 January 2024

Authority

Autoriteit Persoonsgegevens

Fine Amount

€150,000

Enforcement Tracker ID

ETid-2183

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. International Card Services B.V. - Netherlands (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: