Prague—Global law firm Dentons has advised the Czech Banking Credit Bureau ("CBCB") in connection with a comprehensive audit of its activities related to the processing of personal data carried out as the operator of the Banking Customer Information Register ("CIBR").

The CIBR pools data on clients of banks which are its users and which are also joint controllers of personal data within the meaning of the General Data Protection Regulation, and which have concluded an agreement with the CBCB on the processing of personal data and information in the CIBR. The CIBR was created on the basis of information provided by banks to the CBCB in accordance with Section 38a(1) of Act No. 21/1992 Coll., on Banks, as amended.

The Dentons team consisted of partner Zdeněk Kučera, senior associate Štěpánka Havlíková and junior associate Jiří Maršál. The same team performed the audit for the CBCB in 2021.

Commenting on the mandate Zdeněk Kučera said: "The Customer Information Bank Register is a unique database of data on contractual (credit) relations between banks and their clients, including data telling about the creditworthiness, credibility and payment history of the banks´ clients. A high level of data protection is of particular importance in this field. Undertaking regular assessments of the Register´s personal data handing practices and processes is the right way to navigate the GDPR compliance journey and our team is delighted to have been entrusted with another opportunity to assist CBCB with the audit."

Lenka Novotná, Executive Director of the Bank's Customer Information Register stated: "The audit focused primarily on whether the CBCB is meeting all of its data processor obligations under both the EU General Data Protection Regulation (GDPR) and contractual obligations from the CBCB and other sub-processors, and whether it is properly handling and processing personal data within the CIBR. The advantage of working with the Dentons team was of course their previous experience with our processes and their practical knowledge of data protection in this area."

About Dentons

Redefining possibilities. Together, everywhere. For more information visit dentons.com