Bank may require unmasked ID proof, storage is not allowed | Money

This has been determined by the financial complaints institute Kifid, after a complaint from a customer of ABN Amro. She had taped her citizen service number and pasted tape with the text ABN Amro on the front and back. The bank did not accept this and asked for a scan or copy of a raw ID.

However, the customer believed that this was not necessary and turned to Kifid. Financial institutions also check the security features of that proof and that may not be possible if certain parts have been taped or made digitally illegible, as this customer had done.

Control

According to the Kifid Disputes Committee, banks and other financial institutions must comply with the Money Laundering and Terrorist Financing Prevention Act (Wwft). That is why, according to the Kifid, they are right to ask for an unprocessed proof of identity. This can be automatically checked for authenticity. In addition, the bank already knows the customer’s social security number and is allowed to process it.

However, it follows from the GDPR privacy directive that companies must practice ‘minimal data processing’. The Wwft does not prescribe that the passport photo must be stored, nor may an unedited copy be stored just like that.

In order to prevent misuse of the data, the bank itself must therefore store an edited copy, on which the photo is illegible and a watermark has been added.

—