- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Bank – €50,000 Fine (Germany, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A bank was fined EUR 50,000 for failing to secure its video surveillance system. The bank's cameras were hacked, and images were posted online due to inadequate security measures. This case underscores the importance of protecting customer data from cyber threats.
What happened
The bank's video surveillance system was compromised, exposing images and allowing unauthorized access.
Who was affected
Customers of the bank whose images were captured and exposed through the compromised surveillance system.
What the authority found
The DPA found that the bank did not implement adequate security measures and failed to establish a processing agreement with its service providers.
Why this matters
This ruling stresses the need for businesses to prioritize data security, especially when using surveillance technology. Companies should ensure they have proper agreements and protections in place to safeguard customer data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
Processing notes: authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA of Brandenburg has imposed a five-digit fine on a bank. The bank had installed a video surveillance system that covered parts of the foyer of the branch with ATMs, the entrance area and the sidewalk and parking spaces in front of it. The transmission of the images as well as the commands to access the camera were carried out unencrypted via the Internet. The bank suffered a data breach in which unknown third parties compromised the video cameras and then posted the images on the Internet. They were also able to control the cameras to a limited extent. During its investigation, the DPA found that the bank had failed to implement adequate technical and organizational measures to protect personal data, which facilitated such a breach. In addition, the DPA found that the bank failed to enter into a processing agreement with its processors, that also had access to cameras and images.
Related Enforcement Actions (1)
Other enforcement actions involving Bank in DE
Details
Fine Date
1 January 2022
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€50,000
About this data
Cite as: Cookie Fines. Bank - Germany (2022). Retrieved from cookiefines.eu
Last updated: