BEAPD17 September 2019GDPR
Geanonimiseerd (APD 06/2019)
APD: EUR 10,000 fine for GDPR breaches in customer card processing.
EUR€10,000
Summary
The case concerned a complaint about the use of electronic identity cards to create customer cards. The Litigation Chamber found breaches of data minimization, lawful basis for processing, and information duties under the GDPR, and imposed a fine of EUR 10,000.
Grounds for the decision
Breach of data minimization, lawful basis, and information duties in customer card creation.