Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

ING Bank N.V.: Insufficient technical and organisational measures to ensure information security

€0 Fine
ING Bank N.V.
ROMANIA
Art. 32 GDPR
Security Insurance Personal Data Processing Supervisory Authorities Supervision
Nov 28, 2019 Source

How it connects

Related across sources

News The Italian SA fined Poste Vita for data breach European Data Protection Board Case Law SO Warszawa - III C 904/23 Regional Court in Warsaw Literature HOW GDPR TREATS AUTOMATED DECISION-MAKING Journal Scientific and Applied Research Guidance Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH EDPB Literature Tracing the Impact of GDPR on Global Data Privacy International Journal of Science and Research (IJSR) Guidance EDPB Annual Report 2023 EDPB

Full text

Original Fine Summary: ING Bank has not taken appropriate technical and organisational measures for an automated data processing system during the settlement process of card transactions affecting 225,525 customers, resulting in double transactions being executed between 8 and 10 October. Update: The Bucharest Court of Appeal overturned the fine of EUR 80,000.

Industry: Finance, Insurance and Consulting

Original document at the source www.dataprotection.ro

Similar Content