Barclays Bank Plc – Complaint Upheld (Italy, 2021)

Complaint Upheld
Garante per la protezione dei dati personali27 January 2021Italy
final
ePrivacy
Complaint Upheld

Italy's data protection authority upheld a complaint against Barclays Bank for keeping a customer's credit information longer than allowed. This case is important because it shows that companies must follow strict rules on how long they can keep personal data.

What happened

Barclays Bank retained a customer's credit information for longer than the allowed period.

Who was affected

Customers whose credit information was retained by Barclays Bank beyond the permitted duration.

What the authority found

The Garante found that Barclays mistakenly applied a longer data retention period, violating GDPR's data retention rules.

Why this matters

This decision highlights the importance of adhering to data retention limits and ensuring accurate application of data protection rules. Businesses should regularly review their data retention policies to avoid similar issues.

GDPR Articles Cited

AI-verified

Art. 77(GDPR)
Art. 78(GDPR)
Art. 17(1)(a) GDPR
Art. 57(1)(u) GDPR
Art. 58(2) GDPR
Art. 58(2)(b) GDPR
View original scraped data
Art. 17(1)(a) GDPR
Art. 57(1)(u) GDPR
Art. 58(2) GDPR
Art. 58(2)(b) GDPR
Art. 77(GDPR)
Art. 78(GDPR)

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Allegato A.5. Codice di deontologia e di buona condotta per i sistemi informativi gestiti da soggetti privati in tema di crediti al consumo, affidabilità e puntualità nei pagamenti
Codice in materia di protezione dei dati personali (Testo coordinato)
Regolamento n. 1/2019. Procedure interne aventi rilevanza esterna, finalizzate allo svolgimento dei compiti e all'esercizio dei poteri demandati al Garante per la protezione dei dati personali, nonche' all'adozione dei provvedimenti correttivi e sanzionatori.
Source verified 22 March 2026
articles corrected
national law identified
scope corrected
Italy enforcementGarante per la protezione dei dati personali actionsAll Barclays Bank Plc actions
Full Legal Summary
Detailed

The case dealt with data retention and deletion issues related to a mortgage loan, not cookies or consent mechanisms.

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Related Enforcement Actions (0)

No other enforcement actions found for Barclays Bank Plc in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

27 January 2021

Authority

Garante per la protezione dei dati personali

Sources

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Barclays Bank Plc - Italy (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: