Vodafone Romania S.A.
€5,000
Insufficient technical and organisational measures to ensure information security
Datum rozhodnutí
28. října 2024
Úřad
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sektor
Media, Telecoms and Broadcasting
Země
RO
Právo
GDPRStav
FINALPopis
The Romanian DPA fined Vodafone Romania S.A. EUR 5,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to other recipients.
Právní citace
Art. 32
Problémy a porušení
Insufficient technical and organisational measures to ensure information security