BRD-Groupe Société Générale S.A.
€2,000
Non-compliance with general data processing principles
Date de décision
15 juin 2023
Autorité
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Secteur
Finance, Insurance and Consulting
Pays
RO
Droit
GDPRStatut
FINALDescription
The Romanian DPA has imposed a fine of EUR 2,000 on BRD-Groupe Société Générale S.A.. The controller had reported a data breach to the DPA. During its investigation, the DPA found that the controller had unlawfully disclosed personal data of a bank client and other individuals.
Citations légales
Art. 5 (1)Art. 5 (2)
Questions et violations
Non-compliance with general data processing principles