Meedea Construct Prest SRL
€2,000
Insufficient legal basis for data processing
Дата на решението
17 февруари 2025 г.
Орган
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Сектор
Employment
Държава
RO
Право
GDPRСтатус
FINALОписание
The Romanian DPA has imposed a fine of EUR 2,000 in Meedea Construct Prest SRL. The controller disclosed personal and health data of a former employee to a third party, who then used this data against the data subject in court.
Правни цитати
Art. 5 (1)Art. 6Art. 9
Въпроси и нарушения
Insufficient legal basis for data processing