Bank of Ireland – €463,000 Fine (Ireland, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Bank of Ireland was fined for failing to report personal data breaches properly, which affected customer credit information. Between November 2018 and June 2019, the bank submitted multiple breach notifications that included unauthorized disclosures of customer data. This case shows that financial institutions must be diligent in reporting breaches to protect customer privacy.
What happened
The Bank of Ireland reported inaccurate customer data to the Central Credit Register, leading to multiple personal data breaches.
Who was affected
Customers of the Bank of Ireland whose financial data was inaccurately reported and disclosed.
What the authority found
The Data Protection Commission determined that the Bank of Ireland did not report personal data breaches in a timely manner, violating GDPR requirements.
Why this matters
This ruling underscores the importance of timely and accurate reporting of data breaches by financial institutions. It serves as a reminder that companies must have robust procedures in place to manage and report data breaches effectively.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Irish DPA has fined the Bank of Ireland EUR 463,000. The bank had reported 22 data breaches to the DPA under Article 33 GDPR. As part of its investigation, the DPA found that the bank had provided false information to the Central Credit Register due to a mix-up of bank customers' account data. This error had the potential to have a negative impact on the creditworthiness of the data subjects. The DPA found that the personal data breach had occurred due to inadequate technical and organizational measures on the part of the bank. In addition, the bank did not immediately inform the data subjects and the DPA about the data breach.
Related Enforcement Actions (1)
Other enforcement actions involving Bank of Ireland in IE
Details
Fine Date
5 April 2022
Authority
Data Protection Commission
Fine Amount
€463,000
Enforcement Tracker ID
ETid-1115
About this data
Cite as: Cookie Fines. Bank of Ireland - Ireland (2022). Retrieved from cookiefines.eu
Last updated: