Specialty literature and solutions in the market have been focusing in the last decade on collecting and aggregating significant amounts of data about transactions (and user behavior) and on refining the algorithms used to identify fraud. At the same time, legislation in the European Union has been adopted in the same direction (e.g., PSD2) in order to impose obligations on stakeholders to identify fraud. However, on the one hand, the legislation provides a high-level description of this legal obligation, and on the other hand, the solutions in the market are diversifying in terms of data collected and, especially, attempts to aggregate data in order to generate more accurate results. This leads to an issue that has not been analyzed yet deeply in specialty literature or by legislators, respectively, the privacy concerns in case of profile building and aggregation of data for fraud identification purposes and responsibility of stakeholders in the identification of frauds in the context of their obligations under data protection legislation. This article comes as a building block in this direction of research, as it contains (i) an analysis of existing fraud detection methods and approaches, together with their impact from a data protection legislation perspective and (ii) an analysis of respondents’ views toward privacy in case of fraud identification in transactions based on a questionnaire in this respect having 425 respondents. Consequently, this article assists in bridging the gap between data protection legislation and implementation of fraud detection obligations under the law, as it provides recommendations for compliance with the latter legal obligation while also complying with data protection aspects.

中文翻译：

---

金融银行欺诈检测中的隐私侵入

在过去十年中，市场上的专业文献和解决方案一直专注于收集和汇总有关交易（和用户行为）的大量数据以及改进用于识别欺诈的算法。与此同时，欧盟的立法也朝着相同方向（例如 PSD2）通过，以便让利益相关者承担识别欺诈的义务。然而，一方面，立法对这一法律义务进行了高层次的描述，另一方面，市场上的解决方案在收集的数据方面正在多样化，特别是试图聚合数据以生成更准确的结果。这导致了专业文献或立法者尚未分别深入分析的问题，出于欺诈识别目的而建立档案和汇总数据时的隐私问题，以及利益相关者在数据保护立法规定的义务范围内识别欺诈的责任。本文是这一研究方向的一个组成部分，因为它包含 (i) 对现有欺诈检测方法和方法的分析，以及它们从数据保护立法角度的影响，以及 (ii) 对受访者对欺诈行为的看法的分析425 名受访者在这方面的调查问卷的基础上，在交易中的欺诈识别情况下保护隐私。因此，本文有助于弥合数据保护立法与依法履行欺诈检测义务之间的差距，