- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
ING Bank N.V. – Fine (Romania, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
ING Bank did not implement proper security measures for processing card transactions, leading to double charges for many customers. This is significant because it shows that banks must protect customer data to prevent financial harm.
What happened
ING Bank failed to take appropriate measures for an automated data processing system during card transactions.
Who was affected
225,525 customers who experienced double transactions due to ING Bank's security failures.
What the authority found
The court overturned a previous fine against ING Bank for not having adequate security measures in place.
Why this matters
This case underscores the need for financial institutions to prioritize data security. Companies should regularly review their systems to prevent similar issues and protect their customers.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 23 March 2026.
Processing notes: articles corrected, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Original Fine Summary: ING Bank has not taken appropriate technical and organisational measures for an automated data processing system during the settlement process of card transactions affecting 225,525 customers, resulting in double transactions being executed between 8 and 10 October. Update: The Bucharest Court of Appeal overturned the fine of EUR 80,000.
Related Enforcement Actions (0)
No other enforcement actions found for ING Bank N.V. in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
28 November 2019
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
About this data
Cite as: Cookie Fines. ING Bank N.V. - Romania (2019). Retrieved from cookiefines.eu
Last updated: