- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
OTP LEASING ROMANIA IFN SA – €3,000 Fine (Romania, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
OTP LEASING ROMANIA IFN SA was fined EUR 3,000 for not protecting personal data properly. An individual accessed their IT platform without permission, exposing personal information. This case highlights the importance of having strong security measures in place to protect customer data.
What happened
OTP LEASING ROMANIA IFN SA failed to implement adequate security measures, leading to unauthorized access to personal data.
Who was affected
Individuals whose personal data was accessed without authorization from OTP LEASING ROMANIA IFN SA.
What the authority found
The Romanian DPA found that the company did not take appropriate technical and organizational measures to safeguard personal data, violating GDPR requirements.
Why this matters
This ruling emphasizes that companies must prioritize data security to prevent breaches. Small businesses should regularly review their security protocols to protect customer information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 15 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Romanian DPA has imposed a fine of EUR 3,000 on OTP LEASING ROMANIA IFN SA. The controller had reported a data breach to the DPA pursuant to Art. 33 GDPR. An individual had informed the controller that they had gained unauthorized access to an IT platform operated by the controller by changing the URL address and creating an administrator account. This enabled the person to gain unauthorized access to personal data. The DPA found that the controller had failed to take appropriate technical and organizational measures to protect personal data. This resulted in unauthorized access to the personal data.
Related Enforcement Actions (0)
No other enforcement actions found for OTP LEASING ROMANIA IFN SA in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
25 November 2022
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€3,000
About this data
Cite as: Cookie Fines. OTP LEASING ROMANIA IFN SA - Romania (2022). Retrieved from cookiefines.eu
Last updated: