Banca Transilvania S.A. — Regulatory Disclosure
- Victim: Banca Transilvania S.A.
- Date reported: 2026-07-02
- Country: RO
- Severity: Medium
ANSPDCP sanctioned Banca Transilvania S.A. for breaching GDPR Art. 32(1), (2) and (4) after an employee, at the request of a third party, accessed a customer's bank account statements without authorisation and outside their job duties. Fine: 26,172 lei (5,000 EUR).