Romania

SC Raiffeisen Bank SA

2,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2022-09-09.

Rank · Sector

#276

of 322 in Finance, Insurance and Consulting

Rank · Romania

#186

of 283

Rank · All fines

#2,315

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2022-09-09
Controller / Processor: SC Raiffeisen Bank SA
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) d) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Romanian DPA has imposed a fine of EUR 2,000 on SC Raiffeisen Bank SA.
An individual had filed a complaint with the DPA for receiving text messages about money transfers to certain persons that they had not effected.
During its investigation, the DPA found that the bank had accidentally used the telephone number of the data subject for transaction purposes in 44 cases. The data subject was not a customer of the bank and had not requested the transactions.

Open original source Links to the regulator's original publication or another source.