BNP Paribas Personal Finance SA Paris Sucursala București – €2,047 Fine (Romania, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
BNP Paribas sent a commercial SMS to a person without proving prior consent, despite her repeated earlier objections to marketing. ANSPDCP imposed RON 10,000 for unsolicited communications under Article 12 of Law 506/2004, punishable under Article 13(1)(q) of that national law. This is a national electronic-communications sanction, and the source establishes no separate GDPR Article 12 or Article 13 infringement. The 10000 RON fine is converted at the ECB publication-date reference rate on 2021-03-18 of RON 4.8858 per EUR 1, rounded to EUR 2047. The conversion date is not the decision date. The official announcement reports investigation completion in 2021-02, without an exact decision day. Its later publication date is retained as a publication fact rather than the action date.
What happened
BNP Paribas sent a commercial SMS to a person without proving prior consent, despite her repeated earlier objections to marketing.
Who was affected
The original announcement identifies BNP Paribas Personal Finance SA Paris Sucursala București as the sanctioned controller in Romania. No unrelated controller, parent company or reporter is added as a fine recipient.
What the authority found
ANSPDCP imposed RON 10,000 for unsolicited communications under Article 12 of Law 506/2004, punishable under Article 13(1)(q) of that national law. This is a national electronic-communications sanction, and the source establishes no separate GDPR Article 12 or Article 13 infringement.
Why this matters
This February 2021 SMS-marketing case is separate from the older BNP Paribas erasure-request response case, which concerned Article 12(3) GDPR and a RON 9,508 / EUR 2,000 fine. The quotation of general national-law exceptions and sender-identity rules is distinguished from the actual finding.
Source checks
Linked-source text retrieved.
Review needed — 18 October 2026.
Processing notes: articles corrected, national law identified, source review conflict.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
BNP Paribas sent a commercial SMS to a person without proving prior consent, despite her repeated earlier objections to marketing. ANSPDCP imposed RON 10,000 for unsolicited communications under Article 12 of Law 506/2004, punishable under Article 13(1)(q) of that national law. This is a national electronic-communications sanction, and the source establishes no separate GDPR Article 12 or Article 13 infringement. This February 2021 SMS-marketing case is separate from the older BNP Paribas erasure-request response case, which concerned Article 12(3) GDPR and a RON 9,508 / EUR 2,000 fine. The quotation of general national-law exceptions and sender-identity rules is distinguished from the actual finding. The 10000 RON fine is converted at the ECB publication-date reference rate on 2021-03-18 of RON 4.8858 per EUR 1, rounded to EUR 2047. The conversion date is not the decision date. The official announcement reports investigation completion in 2021-02, without an exact decision day. Its later publication date is retained as a publication fact rather than the action date. Appeal status is not established by the announcement.
Related Enforcement Actions (0)
No other enforcement actions found for BNP Paribas Personal Finance SA Paris Sucursala București in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
February 2021
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€2,047
10,000 RON
GDPRhub ID
gdprhub-3246About this data
Cite as: Cookie Fines. BNP Paribas Personal Finance SA Paris Sucursala București - Romania (2021). Retrieved from cookiefines.eu
Last updated: