Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Raiffeisen Bank SA: Insufficient technical and organisational measures to ensure information security

€15,000 Fine
Raiffeisen Bank SA
ROMANIA
Art. 32 GDPR
Security Insurance Personal Data Processing Supervisory Authorities Supervision
Oct 9, 2019 Source

How it connects

Related across sources

News The Italian SA fined Poste Vita for data breach European Data Protection Board Case Law SO Warszawa - III C 904/23 Regional Court in Warsaw Literature HOW GDPR TREATS AUTOMATED DECISION-MAKING Journal Scientific and Applied Research Guidance Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH EDPB Literature Tracing the Impact of GDPR on Global Data Privacy International Journal of Science and Research (IJSR) Guidance EDPB Annual Report 2023 EDPB

Full text

Original fine summary: Raiffeisen Bank Romania carried out scoring assessments on the basis of personal data of individuals registered on the Vreau Credit platform provided by the platform's staff via WhatsApp and then returned the result to Vreau Credit using the same means of communication. Update: The fine was reduced from EUR 150,000 to EUR 15,000 following a court ruling in 2021 link

Industry: Finance, Insurance and Consulting

Original document at the source www.dataprotection.ro

Similar Content