SC Raiffeisen Bank SA
€2,000
Non-compliance with general data processing principles
Date de décision
9 septembre 2022
Autorité
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Secteur
Finance, Insurance and Consulting
Pays
RO
Droit
GDPRStatut
FINALDescription
The Romanian DPA has imposed a fine of EUR 2,000 on SC Raiffeisen Bank SA. An individual had filed a complaint with the DPA for receiving text messages about money transfers to certain persons that they had not effected. During its investigation, the DPA found that the bank had accidentally used the telephone number of the data subject for transaction purposes in 44 cases. The data subject was not a customer of the bank and had not requested the transactions.
Citations légales
Art. 5 (1)
Questions et violations
Non-compliance with general data processing principles