Banca Comerciala Romana SA
- Country
- Romania
- Fine
- 5,000 EUR
- Date
- 2020-05-05
- Sector
- Private Sector
- Articles
- Article 32 (1), (2) and (4)
Lack of appropriate organisational and technical measures
Failure to implement adequate technical and organizational measures to ensure a level of security appropriate to the risk of the processing, as well as to ensure that all individuals acting under controller's authority and who have access to personal data will processes such data with the observance of the internal procedures. This has led to unauthorized processing of clients'personal data by the controller's employees via WhatsApp platform.