Banca Comercială Română SA
€5,000
Insufficient technical and organisational measures to ensure information security
Date de décision
5 mai 2020
Autorité
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Secteur
Finance, Insurance and Consulting
Pays
RO
Droit
GDPRStatut
FINALDescription
The data protection authority finds that the company has not taken adequate technical and organisational measures to ensure an adequate level of information security. This applies in particular to the collection and transmission of copies of customers' identification documents via WhatsApp.
Citations légales
Art. 32
Questions et violations
Insufficient technical and organisational measures to ensure information security