Romania

Banca Transilvania S.A.

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-07-02.

Rank · Sector

#239

of 325 in Finance, Insurance and Consulting

Rank · Romania

#98

of 289

Rank · All fines

#1,861

of 3,067

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-07-02
Controller / Processor: Banca Transilvania S.A.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 32 (1), (2), (4) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on Banca Transilvania S.A. At the request of a third party an employee of the data controller accessed the personal data of the data subject, including their name, surname, bank account number, account type, customer code, transaction data and account balance. The absence of technical and organisational measures designed to ensure data security made this access possible.

Open original source Links to the regulator's original publication or another source.