Raiffeisen Bank SA
€150K($162K USD)final
Date Issued
2019-10-09
Regulation
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Country
Romania
Violation Type
Failure to implement sufficient measures to ensure information security
Currency
EUR
Violation Summary
Raiffeisen Bank Romania did not observe the necessary security measures required by the GDPR when it assessed the scores of individuals on the WhatsApp platform. The personal data was exchanged via WhatsApp.
Articles Violated
Art. 32 GDPR