British
and Irish Legal Information Institute
Freely Available British and Irish Public Legal Information
[
Home]
[
Databases]
[
World Law]
[
Multidatabase Search]
[
Help]
[
Feedback]
Irish Data Protection Commission Case Studies
You are here:
BAILII >>
Databases >>
Irish Data Protection Commission Case Studies >>
Case Study 15: Allied Irish Banks - postal breaches [2012] IEDPC 15 (2012)
URL: http://www.bailii.org/ie/cases/IEDPC/2012/[2012]IEDPC15.html
Cite as:
[2012] IEDPC 15
[
New search]
[
Contents list]
[
Help]
During the Office’s investigation into the cause of postal breaches, it was identified that a significant proportion of Allied Irish Banks’ (AIB) breach notifications were the result of changes of address not being fully processed. We contacted AIB to raise the issue and to seek a solution. The response from AIB showed the seriousness with which they treated the matter, including bringing this matter to the attention of its Board Risk Committee.
AIB stated that it deals with, on average, 240,000 address amendments each year. However, almost one third of the notifications made by AIB to this Office were the result of errors made in the processing of such requests.
AIB, on foot of contact from this Office, carried out a comprehensive analysis of each incident to establish the cause of the error. AIB has now notified us of the procedures it is putting in place to address this issue.
AIB is to introduce a number of measures including the introduction of a “Self-Service Change of Address” facility on its internet banking portal to allow account holders to amend or change their address on accounts held solely in their name. A central unit to process address amendment requests is also to be established. It is proposed that change of address notifications will first be directed towards the self-service facility, but where this is not an option or appropriate, the notification will be forwarded to the central unit for processing.
AIB has also informed us of a number of additional steps that it will be taking immediately, including a number of training and briefing sessions to all its staff and the introduction of additional internal controls.
This Office welcomes the steps being taken by AIB to address this issue. We will monitor the effects of these new procedures and it is expected that they will lead to a serious reduction in the number of such data breach notifications that require to be made to the Office.