Details:

Summary A bank employee made a copy of the identity card of a bank client who wanted to exchange EUR 100 in foreign currency and justified this with money laundering charges. However, these only apply to a sum of EUR 1000 and above.
Link: link
Related articles:  Art. 5 GDPR, Art. 6 GDPR
Type: Insufficient legal basis for data processing
Fine: EUR 100
Sector Finance, Insurance and Consulting

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law