National Bank of Greece – €20,000 Fine (Greece, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The National Bank of Greece was fined for replacing customers' debit and credit cards without their consent, which allowed unauthorized access to transaction data. This is important because it shows that companies must inform users about how their data is being handled. Businesses should ensure they have consent before implementing features that collect personal data.
What happened
The National Bank of Greece replaced customers' cards with new ones that could store transaction history without informing them.
Who was affected
Customers of the National Bank of Greece whose transaction data was collected without their consent.
What the authority found
The authority ruled that the bank failed to inform customers about the data collection, violating GDPR requirements.
Why this matters
This case highlights the need for transparency in data processing. Companies should prioritize user consent and clear communication about data practices.
GDPR Articles Cited
The Hellenic DPA has imposed a fine of EUR 20,000 on the National Bank of Greece. A data subject had filed a complaint against a company and the bank after they failed to comply with his right to information. After returning a product he had purchased from a company, the data subject had asked the company via Facebook Messenger to inform him about the request to cancel his credit card statements sent electronically to the bank. However, the controller refused to comply, whereupon the data subject asserted the same right with the bank, which, however, did not provide him with a response.
Related Enforcement Actions (2)
Other enforcement actions involving National Bank of Greece in GR
Fine
€20K
Details
Fine Date
26 August 2021
Authority
Hellenic Data Protection Authority
Fine Amount
€20,000
Enforcement Tracker ID
ETid-841
About this data
Cite as: Cookie Fines. National Bank of Greece - Greece (2021). Retrieved from cookiefines.eu
Last updated: