On 06.05.2021, the Cluj Court rejected the appeal filed by Banca Transilvania against the contravention report applied by A.N.S.P.D.C.P, ordering its maintenance.

We remind you that at the end of 2020, ANSPDCP sanctioned Banca Transilvania with a fine of 100,000 Euros as a result of violating the legal provisions regarding the processing of personal data (EU Regulation 679/2016 on the protection of individuals with regard to data processing personnel and Law No. 190/2018 on measures to implement the EU Regulation).

The Authority found that Banca Transilvania did not implement the appropriate technical and organizational measures to ensure the protection of personal data processed at the unit level.

During the investigation, it was found that the disclosure in the public space (online) of the statement requested by the operator (Banca Transilvania) to a client of his regarding the way in which he intended to use a certain amount of money that he he wanted to take it out of his account.

The statement provided by the client was distributed among the employees of Banca Transilvania on the office e-mail addresses, and subsequently the client’s statement reached the known social networks and sites.

As a result of the fine applied by A.N.S.P.D.C.P, Banca Transilvania proceeded to contest in court the minutes in question, and on 06.05.2021, the court rejected the appeal. The decision of the Tribunal may be appealed.