GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Raiffeisen Bank SA

Country
Romania
Fine
150,000 EUR
Date
2019-10-09
Sector
Private Sector
Articles
Article 32

Lack of required organisational and technical measures

Failure to take appropriate organisational and technical measures to guarantee that all persons acting under his authority and having access to personal data process these data in accordance with internal procedures. Credit scoring information was exchanged via the WhatsApp platform.