Poland’s data protection authority, the UrzÄ…d Ochrony Danych Osobowych, fined ING Bank ÅšlÄ…ski’s PLN18.5 million regarding insufficient analysis of the necessity and proportionality of customer data collection. The bank allegedly did not perform a risk assessment and justification analysis for its identification card scans to verify customers over an 18-month period.
Full story