Skip to content
Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Banca Transilvania S.A.: Insufficient technical and organisational measures to ensure information security

The Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) fined Banca Transilvania S.A.

Status Not cited by any decision here yet

€5,000 Fine
Banca Transilvania S.A.
Romania
Art. 32 GDPR
Finance, Insurance and Consulting

We hold a reference to this item, not its text.

enforcementtracker.com Read at the source

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) · Jul 2, 2026

How it connects

C-169/23 Nemzeti Adatvédelmi és Információszabadság Hatóság v UC In Case C-169/23, the Court of Justice of the European Union (Third Chamber) ruled on a preliminary reference from the Kúria (Hungary) concerning whether the Budapest Metropolitan… CJEU ·Third Chamber Nov 28, 2024 Personal Data Legitimate Interest Fairness & Transparency
BA-6S/221/2019 Slovak court upholds €50,000 fine against Sociálna poisťovňa for sending sensitive data Sociálna poisťovňa, the social insurance agency (the controller), processes applications for foreign invalidity pensions and forwards related documents to the social insurance… Jun 25, 2025 Personal Data Integrity and Confidentiality Principle Data Breaches
S 5 SF 65/24 DS SG Nürnberg: MOVEit zero-day cyberattack via processor did not breach Art. 32 GDPR The data subject (a child born in 2018), represented by her parents, was insured with the controller (a statutory health insurance provider) and participated in its digital bonus… Social Court Nuremberg Jun 10, 2026 Processors Controllers Integrity and Confidentiality Principle
C-768/21 TR v Land Hessen In Case C-768/21, the Court of Justice of the European Union (First Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning TR's challenge of… CJEU ·First Chamber Sep 26, 2024 Supervision Data Breaches Integrity and Confidentiality Principle
29 K 3490/24 VG Düsseldorf: data subjects challenge district's sharing of personal data in water-law A district (the controller), acting as the lower water authority, initiated administrative proceedings after identifying unauthorised riverbank works and a private jetty on two… Administrative Court Düsseldorf Jun 22, 2026 Personal Data Supervision Supervisory Authorities