Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) · 23 March 2026

ING Bank NV Amsterdam – Sucursala București S.A.

Insufficient technical and organisational measures to ensure information security

Fine€4,000Fine issued

Regulator: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Decided: 23 March 2026
Country: Romania
Sector: Finance, Insurance and Consulting
Regulator’s reference: Not recorded
Fino case number: 2026/RO/013

Export as PDF

What happened

Nobody has summarised this decision yet. The regulator’s own decision is linked below.

The source doesn’t list which GDPR articles were involved.

Bigger than 61% of the 317 fines in Romania.

Across the whole database, bigger than 34% of 3,642 fines.

3 decisions against ING Bank NV Amsterdam Sucursala București, €27,000 in fines.

Decisions in Romania.

9 decisions against 5 companies in the group, €6.5 million in fines.

ING Bank N.V. and its branches.

ING Bank ŚląskiDecisions in Poland · 1 decision€4,323,250
ING BANK N.V., SUCURSAL EN ESPAÑADecisions in Spain · 1 decision€1,600,000
ING Bank N.VDecisions in Romania, Spain · 2 decisions€500,000
ING Bank NV Amsterdam Sucursala BucureștiDecisions in Romania · 3 decisions€27,000
ING Bank N.V. Amsterdam - Bucharest officeDecisions in Romania · 2 decisions€4,000

Same country, overlapping articles or topics.

The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.

Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/RO/013.