# Unicredit Bank SA: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Date: 2026-05-29
- Original: https://www.enforcementtracker.com/ETid-3184
- Canonical: https://overview.legal/posts/53635
- Topics: Security, Personal Data, Supervisory Authorities, Insurance, Supervision, Processing

## Summary

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) fined Unicredit Bank SA €12,000 on 2026-05-29 for: Insufficient technical and organisational measures to ensure information security.

## Full text

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) fined Unicredit Bank SA €12,000 on 2026-05-29 for: Insufficient technical and organisational measures to ensure information security.
GDPR Articles: Art. 32 (1) b), (2), (4) GDPR, Art. 33 (1) GDPR
Sector: Finance, Insurance and Consulting
Country: Romania
Source: https://www.dataprotection.ro/index.jsp?page=Comunicat_Presa_29_05_2026

---
Generated by overview.legal · https://overview.legal/posts/53635 · 2026-08-22