Enforcement·Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)EN
Export
ING BANK NV AMSTERDAM - SUCURSALA BUCUREȘTI: Insufficient technical and organisational measures to ensure information security
StatusNot cited by any decision here yet
Summary
The Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) fined ING Bank NV Amsterdam - Sucursala București €5,000 on November 4, 2026, for failing to implement sufficient technical and organizational measures to ensure information security. The enforcement action cited violations of Article 32(1)(b), (d), (2), and (4) of the GDPR, addressing the bank's inadequate safeguards for protecting personal data.
We hold a reference to this item, not its text.
enforcementtracker.comRead at the sourceHow it connects
Related across sources
C-169/23 Nemzeti Adatvédelmi és Információszabadság Hatóság v UC In Case C-169/23, the Court of Justice of the European Union (Third Chamber) ruled on a preliminary reference from the Kúria (Hungary) concerning whether the Budapest Metropolitan… CJEU ·Third Chamber Nov 28, 2024 Personal Data Legitimate Interest Fairness & Transparency
BA-6S/221/2019 Slovak court upholds €50,000 fine against Sociálna poisťovňa for sending sensitive data Sociálna poisťovňa, the social insurance agency (the controller), processes applications for foreign invalidity pensions and forwards related documents to the social insurance… Jun 25, 2025 Personal Data Integrity and Confidentiality Principle Data Breaches
S 5 SF 65/24 DS SG Nürnberg: MOVEit zero-day cyberattack via processor did not breach Art. 32 GDPR The data subject (a child born in 2018), represented by her parents, was insured with the controller (a statutory health insurance provider) and participated in its digital bonus… Social Court Nuremberg Jun 10, 2026 Processors Controllers Integrity and Confidentiality Principle
C-807/21 Deutsche Wohnen SE v Staatsanwaltschaft Berlin C-807/21 (Deutsche Wohnen) CJEU Dec 5, 2023 Fines Liability IP Address
2026 Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 EDPB Feb 18, 2026 Anonymization Pseudonymization Security
C-768/21 TR v Land Hessen In Case C-768/21, the Court of Justice of the European Union (First Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning TR's challenge of… CJEU ·First Chamber Sep 26, 2024 Supervision Data Breaches Integrity and Confidentiality Principle