Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) · 29 May 2026

Unicredit Bank SA

Insufficient technical and organisational measures to ensure information security

Fine€12,000Fine issued

Regulator: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Decided: 29 May 2026
Country: Romania
Sector: Finance, Insurance and Consulting
Regulator’s reference: Not recorded
Fino case number: 2026/RO/018

Export as PDF

What happened

Nobody has summarised this decision yet. The regulator’s own decision is linked below.

Bigger than 86% of the 317 fines in Romania.

Across the whole database, bigger than 55% of 3,642 fines.

3 decisions against Unicredit Bank SA, €157,000 in fines.

Decisions in Romania.

7 decisions against 3 companies in the group, €3.6 million in fines.

UniCredit and its banks in other countries.

Unicredit S.p.A.Decisions in Italy · 3 decisions€3,470,000
Unicredit Bank SADecisions in Romania · 3 decisions€157,000
UniCredit Bank Czech Republic and Slovakia, a.s.Decisions in Czech Republic · 1 decision€3,140

Same country, overlapping articles or topics.

The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.

Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/RO/018.