The Statement of the Personal Data Protection Inspector
2016-07-13 13:44:47The Personal Data Protection Inspector has launched an inspection of one of the online loan companies on collecting the usernames and passwords of internet banking service users. The inspection started as a result of complaints from the Data Exchange Agency, the Association of Banks of Georgia, and some commercial banks.
Submitting login information of internet banking service on various websites creates high risk of unsanctioned access to financial information, as well as execution of unauthorized operations via internet banking.
For security purposes, the Personal Data Protection Inspector recommends, that online loan clients should review service conditions in detail and analyze those risks which are related to the disclosure of this kind of personal data. Additionally, in case they have already provided any online loan company with internet banking login information, they should immediately change their password.
As this kind of data collection practice could exist in other online loan companies, we call upon citizens and other interested parties to inform us about any incidents.