started · updated
Casino fined 2.59 million euros for GDPR biometric data violations
The Personal Data Protection Agency (AZOP) has imposed an administrative fine of 2.59 million euros on a gambling company, reportedly Admiral, for multiple violations of the General Data Protection Regulation (GDPR).
An official investigation revealed that the company improperly processed the biometric data of nearly 35,000 players. While the company claimed to collect only two fingerprints for identity verification via RFID chips or biometric scans, inspectors found that four fingerprints—two from each hand—were actually being collected.
The company justified the collection of additional fingerprints by citing the risk of skin damage, which could lead to failed or inaccurate readings. However, AZOP concluded that providing 'backup' fingerprints did not prove the necessity of collecting such a large volume of data and that the company failed to demonstrate that the same goal could not be achieved with less data.
In addition to the biometric issues, the agency identified deficiencies in how player consent was obtained and noted a lack of transparency in how users were informed about the processing of their personal data.
Entities
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 4 SOURCES] The fine amount is 2.59 million euros. ohridsky.com · www.dnevno.hr · www.jutarnji.hr · lidermedia.hr
- [● 3 SOURCES] Biometric data was collected for nearly 35,000 players. www.dnevno.hr · www.jutarnji.hr · lidermedia.hr
- [● 3 SOURCES] The company is reportedly Admiral. www.dnevno.hr · www.jutarnji.hr · lidermedia.hr
- [● 4 SOURCES] The company justified the extra fingerprints as a precaution against skin damage affecting sensor readability. ohridsky.com · www.dnevno.hr · www.jutarnji.hr · lidermedia.hr
- [● 4 SOURCES] The company used fingerprints and RFID chips to speed up player identification. ohridsky.com · www.dnevno.hr · www.jutarnji.hr · lidermedia.hr
- [● 4 SOURCES] The company collected four fingerprints instead of the claimed two. ohridsky.com · www.dnevno.hr · www.jutarnji.hr · lidermedia.hr
- [● 3 SOURCES] AZOP found violations regarding consent and transparency in data processing. www.dnevno.hr · www.jutarnji.hr · lidermedia.hr
- [● 4 SOURCES] The Personal Data Protection Agency (AZOP) imposed an administrative fine. ohridsky.com · www.dnevno.hr · www.jutarnji.hr · lidermedia.hr