Core Viewpoint - The incident involving a bank questioning a customer about a withdrawal of 40,000 yuan has sparked widespread discussion regarding potential violations of personal privacy and the legality of banks accessing customer transaction histories [2][3]. Group 1: Legal Implications - Multiple lawyers have indicated that the bank's actions may violate the "necessity principle" outlined in the Personal Information Protection Law, suggesting that the inquiry into the customer's transaction history was excessive [3][4]. - The definition of sensitive personal information includes bank account information, which is categorized as sensitive due to the potential harm that could arise from its unauthorized disclosure [3][4]. Group 2: Bank's Responsibilities - According to the Banking Financial Institutions' Personal Financial Information Protection Management Measures, banks are prohibited from querying, using, or disclosing customer financial information beyond necessary limits [4]. - Legal experts assert that banks can only access personal account transaction information under specific conditions, such as obtaining the account holder's consent, fulfilling legal obligations, or for internal risk management purposes [5]. Group 3: Customer Rights and Actions - Customers have the right to report unauthorized access to their transaction histories to higher authorities or take legal action if they suffer financial or reputational damage due to such breaches [5]. - Some legal professionals argue that while banks may need to conduct inquiries for social governance, they should balance the means and ends of such actions to avoid overstepping privacy boundaries [5].