The online bank Boursorama was given formal notice by the Cnil for having asked certain customers for their username and password from the government tax site, AFP learned on Thursday from concordant sources, confirming information from the specialist media Next INpact.
We fully intend to comply with it, reacted to AFP Xavier Prin, communication manager of the bank, indicating that he received the formal notice from the Cnil in August.
The French private life policeman confirmed the procedure but without providing more details, the formal notice not being public.
To obtain a consumer loan more quickly, since June 2022 Boursorama has been offering its customers who do not have their income domiciled with it to provide it directly with the identifier and password for the tax site.
By getting the information it needs from the source, the bank saves time, especially on verification because it does not have to ensure the authenticity of the document.
But this possibility remained optional and was done in the secure environment of the website, defended Mr. Prin.
For us, we respect our obligations of protection, anonymization and security, he argued.
This formal notice comes in a context where Internet users are constantly reminded never to give their passwords to anyone, recalls the Next INpact site.