Banca Transilvania SA
- Country
- Romania
- Fine
- 100,000 EUR
- Date
- 17.12.20(17.12.20)
- Sector
- Private Sector
- Articles
- Article 32 (1) and (2)Article 5 f)
Insufficient organisational and technical measures, Infringement of data integrity and confidentiality principle
Failure of the controller to observe the principle of integrity and confidentiality of personal data and to implement adequate technical and organizational measures in order to secure the processed data led to disclosure and unauthorized access to personal data (e.g. name and surname, e-mail addresses, behavioural data, personal preferences, transaction value, place of work, position and place of work, work telephone number) of 4 data subjects (one client and three employees of the controller).
Source: https://www.dataprotection.ro/index.jsp?page=Comunicat_17_12_2020&lang=en
Reported by: Wolf Theiss