- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Raiffeisen Bank SA – €15,000 Fine (Romania, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Raiffeisen Bank in Romania was fined for improperly handling personal data while assessing credit scores. This is important because it shows that banks must be careful with how they use personal information.
What happened
Raiffeisen Bank conducted scoring assessments using personal data shared via WhatsApp without proper security measures.
Who was affected
Individuals registered on the Vreau Credit platform whose data was used for scoring assessments.
What the authority found
The data protection authority found that the bank violated GDPR rules by not ensuring adequate security for personal data processing.
Why this matters
This ruling emphasizes the need for banks and financial institutions to have strong data protection practices in place. Companies should ensure secure communication methods when handling sensitive information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 13 March 2026.
Processing notes: articles corrected, entity split needed, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Original fine summary: Raiffeisen Bank Romania carried out scoring assessments on the basis of personal data of individuals registered on the Vreau Credit platform provided by the platform's staff via WhatsApp and then returned the result to Vreau Credit using the same means of communication. Update: The fine was reduced from EUR 150,000 to EUR 15,000 following a court ruling in 2021 link
Related Enforcement Actions (0)
No other enforcement actions found for Raiffeisen Bank SA in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
9 October 2019
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€15,000
About this data
Cite as: Cookie Fines. Raiffeisen Bank SA - Romania (2019). Retrieved from cookiefines.eu
Last updated: