fineConcludedPLN 261,918

UODO (Polish DPA) Bank (anonymised, DKN.5112.14.2022)

December 18, 2024 · Poland

UODO fined a bank PLN 261,918 over its use of profiling for credit-scoring and credit-risk: it failed to record the profiling in its register of processing activities, failed to carry out a DPIA for the profiling, and did not ensure the DPO's independence.

Key takeaway — how to prevent this

Automated decision-making and risk-scoring must be tested for discrimination and be explainable to those affected; opaque algorithms applied to people draw regulatory action.

Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.