Details:

Summary The Romanian DPA has imposed a fine of EUR 2,000 on SC Raiffeisen Bank SA.
An individual had filed a complaint with the DPA for receiving text messages about money transfers to certain persons that they had not effected.
During its investigation, the DPA found that the bank had accidentally used the telephone number of the data subject for transaction purposes in 44 cases. The data subject was not a customer of the bank and had not requested the transactions.
Link: link
Related articles:  Art. 5 (1) d) GDPR
Type: Non-compliance with general data processing principles
Fine: EUR 2,000
Sector Finance, Insurance and Consulting

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law