- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Casa Rusu S.R.L. – €2,000 Fine (Romania, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Casa Rusu S.R.L. was fined for using an unauthorized payment form that compromised customer bank data. The Romanian authority found that the company did not take proper steps to protect personal information. This case serves as a warning for businesses to secure their payment processes.
What happened
The Romanian DPA fined Casa Rusu S.R.L. for using an unauthorized payment form that allowed unauthorized access to customer bank data.
Who was affected
Customers whose bank details were collected through the unauthorized payment form on Casa Rusu S.R.L.'s website.
What the authority found
The DPA ruled that the company violated Articles 25(1) and 32(1)(b) of the GDPR by failing to implement adequate security measures.
Why this matters
This ruling underscores the need for businesses to ensure secure payment processes to protect customer data. Companies must be vigilant in implementing security measures to avoid breaches and fines.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Romanian DPA has imposed a fine of EUR 2,000 on Casa Rusu S.R.L. . The controller had reported a data breach to the DPA pursuant to Art. 33 GDPR. The controller had used an unauthorized form during the payment process on its website, through which the bank data of the customer cards were collected. This allowed unauthorized access to personal data such as the first and last name of the affected bank cardholder, card number, expiration date and year, CVC code. During its investigation, the DPA found that the controller failed to take appropriate technical and organizational measures to protect personal data.
Related Enforcement Actions (0)
No other enforcement actions found for Casa Rusu S.R.L. in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
9 December 2022
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€2,000
About this data
Cite as: Cookie Fines. Casa Rusu S.R.L. - Romania (2022). Retrieved from cookiefines.eu
Last updated: