ING Bank NV Amsterdam – Sucursala București S.A. – €4,000 Fine (Romania, 2026)

€4,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal23 March 2026Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

ING Bank NV Amsterdam – Sucursala București S.A. was fined EUR 4,000 for not having enough security measures in place to protect customer data. An employee mistakenly gave bank account statements to someone who wasn't authorized to receive them. This case serves as a reminder for businesses to prioritize data security to protect sensitive information.

What happened

ING Bank failed to implement adequate security measures, leading to an unauthorized disclosure of bank account statements.

Who was affected

Customers of ING Bank whose bank account statements were improperly shared with an unauthorized third party.

What the authority found

The Romanian DPA determined that the bank did not have sufficient technical and organizational measures to ensure data security, violating GDPR standards.

Why this matters

This case highlights the critical need for businesses to invest in data security measures. Companies should regularly assess their security protocols to prevent unauthorized access to sensitive information.

GDPR Articles Cited

AI-verified

Art. 32(1)(b) GDPR
View original scraped data
Art. 32(1) b) GDPR
d)
(2) GDPR

Original data from scraper before AI verification against source document.

Source verified 6 April 2026
articles corrected
Full Legal Summary
Detailed

The Romanian DPA has imposed a fine of EUR 4,000 on ING Bank NV Amsterdam – Sucursala București S.A. The controller failed to implement adequate technical and organisational measures to ensure data security. This resulted in an employee handing bank account statements to an unauthorised third party.

Related Enforcement Actions (0)

No other enforcement actions found for ING Bank NV Amsterdam – Sucursala București S.A. in RO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

23 March 2026

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€4,000

Enforcement Tracker ID

ETid-3070

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. ING Bank NV Amsterdam – Sucursala București S.A. - Romania (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: