Germany: LfD Niedersachsen investigation into data processing practices for profiling purposes as a 'legitimate interest' (GDPR Art. 6)

Progress

Current status
under investigation
28 Jul 2022 under investigation

Scope

Implementers
Germany
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
digital payment provider (incl. cryptocurrencies)
Government Branch
executive
Government Body
data protection authority
Implementation Level
subnational

Timeline of events

28 Jul 2022
under investigation

LfD Niedersachsen issues fine against Bank over its data processing practices for profiling purposes

On 28 July 2022, the State Commissioner for Data Protection (LfD) of Lower Saxony announced that it has issued a fine of EUR 900’000 on a banking institution, without disclosing the name of the entity. The LfD noted that the banking institution proc…

Source
Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority