Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — UNICREDIT BANK SA : 130 k€ (2019)
- Autorité de contrôle
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Pays
- Roumanie
- Entreprise / secteur
- UNICREDIT BANK SA
- Montant de l'amende
- 130 k€
- Date de la décision
- 27 juin 2019
- Fondement juridique
- Art. 25 (1), Art. 5 (1) c)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The fine was issued as a result of the failure to implement appropriate technical and organisational measures (related to (1) the determination of the processing means/operations, and (2) the integration the necessary safeguards) resulting in the online-disclosure of IDs and addresses (interla/external transactions) of 337,042 data subjects to their respective beneficiary (between 25.05.2018 -10.12.2018).
Décision officielle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)