Barclays Bank Plc – Complaint Upheld (Italy, 2021)

Complaint Upheld
Garante per la protezione dei dati personali27 January 2021Italy
final
ePrivacy
Complaint Upheld

Italy's data protection authority upheld a complaint against Barclays Bank for keeping a customer's credit information longer than allowed. This case is important because it shows that companies must follow strict rules on how long they can keep personal data.

What happened

Barclays Bank retained a customer's credit information for longer than the allowed period.

Who was affected

Customers whose credit information was retained by Barclays Bank beyond the permitted duration.

What the authority found

The Garante found that Barclays mistakenly applied a longer data retention period, violating GDPR's data retention rules.

Why this matters

This decision highlights the importance of adhering to data retention limits and ensuring accurate application of data protection rules. Businesses should regularly review their data retention policies to avoid similar issues.

GDPR Articles Cited
Automatically processed
Art. 77(GDPR)
Art. 78(GDPR)
Art. 17(1)(a) GDPR
Art. 57(1)(u) GDPR
Art. 58(2) GDPR
Art. 58(2)(b) GDPR
View original scraped data
Art. 17(1)(a) GDPR
Art. 57(1)(u) GDPR
Art. 58(2) GDPR
Art. 58(2)(b) GDPR
Art. 77(GDPR)
Art. 78(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Allegato A.5. Codice di deontologia e di buona condotta per i sistemi informativi gestiti da soggetti privati in tema di crediti al consumo, affidabilità e puntualità nei pagamenti
Codice in materia di protezione dei dati personali (Testo coordinato)
Regolamento n. 1/2019. Procedure interne aventi rilevanza esterna, finalizzate allo svolgimento dei compiti e all'esercizio dei poteri demandati al Garante per la protezione dei dati personali, nonche' all'adozione dei provvedimenti correttivi e sanzionatori.

Source checks

Linked-source text retrieved.

Automated check recorded — 22 March 2026.

Processing notes: articles corrected, national law identified, scope corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Italy enforcementGarante per la protezione dei dati personali actionsAll Barclays Bank Plc actions
Full Legal Summary
Detailed

The case dealt with data retention and deletion issues related to a mortgage loan, not cookies or consent mechanisms.

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Related Enforcement Actions (0)

No other enforcement actions found for Barclays Bank Plc in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

27 January 2021

Authority

Garante per la protezione dei dati personali

Sources

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Barclays Bank Plc - Italy (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: