Banca Comercială Română SA – €2,000 Fine (Romania, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Banca Comercială Română was fined EUR 2,000 after a data breach sent customer information to the wrong people. This breach shows the importance of strong security measures to protect personal data. Businesses should ensure their systems are secure to avoid similar mistakes.
What happened
Banca Comercială Română experienced a data breach where emails with customer data were sent to incorrect recipients.
Who was affected
The breach affected 564 customers whose personal and financial information was exposed.
What the authority found
The Romanian DPA found the bank failed to implement adequate security measures, violating GDPR's security requirements.
Why this matters
This case highlights the need for robust IT security to prevent data breaches. Companies should regularly review and update their security protocols to protect customer data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Romanian DPA has imposed a fine of EUR 2,000 on Banca Comercială Română SA. The bank had notified the DPA of a data breach pursuant to Art. 33 GDPR. Due to an error in the IT application of the controller, emails containing personal data of customers were sent to the wrong recipients. This data breach resulted in the unauthorized disclosure of and access to certain personal data such as first and last name, home address, phone number, email address, and financial information. The incident affected 564 individuals. The DPA found that the bank had failed to take appropriate technical and organizational measures to ensure a level of security commensurate with the processing risk.
Related Enforcement Actions (0)
No other enforcement actions found for Banca Comercială Română SA in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
19 September 2022
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€2,000
About this data
Cite as: Cookie Fines. Banca Comercială Română SA - Romania (2022). Retrieved from cookiefines.eu
Last updated: