Romania

ING Bank N.V. Amsterdam - Bucharest office

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-12-30.

Rank · Sector

#250

of 322 in Finance, Insurance and Consulting

Rank · Romania

#116

of 283

Rank · All fines

#2,022

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2020-12-30
Controller / Processor: ING Bank N.V. Amsterdam - Bucharest office
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) a) - d) GDPR, Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA (ANSPDCP) fined ING Bank N.V. Amsterdam - Bucharest office in the amount of EUR 3,000. The bank had contacted the data subject by e-mail for the purpose of updating his data. At that time, however, the data subject had already terminated his account with the bank, so that the contractual relationship had been terminated. As a result, the data controller had unlawfully processed personal data of the former customer without his consent such as the e-mail address and the name and of the data subject.

Open original source Links to the regulator's original publication or another source.