Finland: Data Protection Ombudsman's Office issued a ruling with penalty of EUR 1.8 million against S-Banken over information security negligence in online banking

Description

Data Protection Ombudsman's Office issued a ruling with penalty of EUR 1.8 million against S-Banken over information security negligence in online banking

On 8 September 2025, the Data Protection Ombudsman's Office imposed a penalty of EUR 1.8 million against S-Banken over information security negligence in online banking. The negligence stemmed from a programming error in the S-mobil login function, …

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
other service provider
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2022-09-15
under deliberation

On 15 September 2022, the Finnish Data Ombudsman opened an investigation into a personal data incid…

2025-09-08
in force

On 8 September 2025, the Data Protection Ombudsman's Office imposed a penalty of EUR 1.8 million ag…