Banca Transilvania S.A.: Insufficient legal basis for data processing

€5,000 fine - Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

€5,000 Fine

Banca Transilvania S.A.

ROMANIA

Insufficient legal basis for data processing

Apr 3, 2025 Source

Content

The Romanian DPA has imposed a fine of EUR 5,000 on Banca Transilvania S.A. The controller forwarded client data to an insurance company without a sufficient legal basis.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Industry: Finance, Insurance and Consulting