View source for ANSDPCP (Romania) - BNP Paribas Personal Finance SA Paris Sucursala București

{{DPAdecisionBOX

|Jurisdiction=Romania
|DPA-BG-Color=background-color:#ffffff;
|DPAlogo=LogoRO.jpg
|DPA_Abbrevation=ANSPDCP (Romania)
|DPA_With_Country=ANSPDCP (Romania)

|Case_Number_Name=
|ECLI=

|Original_Source_Name_1=ANSDPCP
|Original_Source_Link_1=https://www.dataprotection.ro/index.jsp?page=Amenda_pentru_incalcarea_RGPD&lang=en
|Original_Source_Language_1=English
|Original_Source_Language__Code_1=EN
|Original_Source_Name_2=
|Original_Source_Link_2=
|Original_Source_Language_2=
|Original_Source_Language__Code_2=

|Type=Investigation
|Outcome=Violation Found
|Date_Started=
|Date_Decided=22.11.2019
|Date_Published=
|Year=2019
|Fine=2,000
|Currency=EUR

|GDPR_Article_1=Article 12(3) GDPR
|GDPR_Article_Link_1=Article 12 GDPR#3
|GDPR_Article_2=
|GDPR_Article_Link_2=
|GDPR_Article_3=
|GDPR_Article_Link_3=

|EU_Law_Name_1=
|EU_Law_Link_1=
|EU_Law_Name_2=
|EU_Law_Link_2=

|National_Law_Name_1=
|National_Law_Link_1=
|National_Law_Name_2=
|National_Law_Link_2=

|Party_Name_1=BNP Paribas Personal Finance SA Paris 
|Party_Link_1=
|Party_Name_2=Sucursala București
|Party_Link_2=
|Party_Name_3=
|Party_Link_3=

|Appeal_To_Body=
|Appeal_To_Case_Number_Name=
|Appeal_To_Status=
|Appeal_To_Link=

|Initial_Contributor=
|
}}

The ANSDPC in Romania fined BNP Paribas because it did not respond to the applicant’s access request within the one-month period required under Article 12(3) GDPR. 

==ANSDPCP English press release==
The controller BNP Paribas Personal Finance SA was sanctioned with a fine in the amount of 9508 lei, the equivalent of 2000 Euros.

The investigation was initiated as a result of some complaints alleging that the controller did not respond to the applicant within the time limit provided by Article 12 paragraph (3) of the General Data Protection Regulation, although it had requested the deletion of certain personal data reported in the records system of Biroul de Credit.

Pursuant to Article 12 paragraph (3) of the General Data Protection Regulation, the controller has the obligation to respond to the requests of the data subjects without unjustified delays and at the latest within one month from the receipt of the request.

Also, a corrective measure was applied to the controller of BNP Paribas Personal Finance SA, which consisted in the adoption of measures, at the company level, regarding the settlement of the requests of the data subjects, so that, in all cases, the provisions of Article 12 of Regulation (EU) 2016/679 are observed.

==Comment==

''Share your comments here!''

==Further Resources==
''Share blogs or news articles here!''