Finland: Data Protection Ombudsman's investigation into S-Banken over alleged information security negligence in online banking
Progress
Current status
in force
08 Sep 2025 in force
15 Sep 2022 under deliberation
Scope
Implementers
Finland
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
other service provider
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Data Protection Ombudsman's Office issued a ruling with penalty of EUR 1.8 million against S-Banken over information security negligence in online banking
On 8 September 2025, the Data Protection Ombudsman's Office imposed a penalty of EUR 1.8 million against S-Banken over information security negligence in online banking. The negligence stemmed from a programming error in the S-mobil login function, …
SourceEvent type
investigation
Action type
ruling
Government branch
executive
Government body
data protection authority
Data Protection Ombudsman's Office opened an investigation into S-Banken over information security negligence in online banking
On 15 September 2022, the Finnish Data Ombudsman opened an investigation into a personal data incident at S-Banken caused by a system failure in online banking identification between 20 April and 5 August 2022. A few hundred customers were able to l…
SourceEvent type
investigation
Action type
announcement
Government branch
executive
Government body
data protection authority