- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Deutsche Bank Italia – Court Ruling (Italy, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Deutsche Bank Italia asked a customer for sensitive data to open a bank account, but the customer later changed his mind. The court ruled that the bank didn't need this data to complete the contract, which goes against the rule of only collecting necessary information. This decision is important because it reinforces the idea that companies should limit the data they ask for.
What happened
Deutsche Bank Italia required a customer to provide sensitive data to sign a contract for a bank account, but the customer withdrew consent.
Who was affected
The customer who was asked for sensitive data by Deutsche Bank Italia.
What the authority found
The court found that the bank's request for sensitive data was not necessary for the contract, violating the principle of data minimization under GDPR.
Why this matters
This ruling emphasizes that companies should only collect data that is essential for their services. Businesses should review their data collection practices to avoid unnecessary requests.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 March 2026.
Processing notes: articles corrected, national law identified, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Deutsche Bank S.p.A. asked a customer to provide his sensitive data in order to sign a contract for a bank account. The customer initially accepted the clause included in the contract, but then he withdrew his consent. As a result, the bank interrupted the service. The Court had to assess whether this sensitive data was necessary for the Bank in order to conclude a contract for a bank account. The Court found that the processing of the customer's sensitive data was not necessary for the execution of the relevant contract. Such a clause violates the principle of data minimization as provided for in Article 5(1)(c) GDPR. Consequently, according to Article 1418 of the Italian Civil Code, the contractual clause was declared invalid as contrary to mandatory rules.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Deutsche Bank Italia in IT
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Deutsche Bank Italia - Italy (2019). Retrieved from cookiefines.eu
Last updated: