Telekom Romania Communications SA
Non-compliance with general data processing principles
Ημερομηνία απόφασης
6 Δεκεμβρίου 2021
Αρχή
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Τομέας
Media, Telecoms and Broadcasting
Χώρα
RO
Νόμος
GDPRΚατάσταση
FINALΠεριγραφή
The Romanian DPA (ANSPDCP) imposed a fine of EUR 6,000 on Telekom Romania Communications SA. A data subject had complained that the controller had sent invoices and messages to his email address informing him of another person's payment arrears. During the investigation, the DPA found that the controller had collected and processed certain personal data in error, resulting in the unlawful disclosure of the personal data. At the same time, the DPA found that the controller had not taken the necessary measures to comply with the data subject's request for deletion of his personal data. The fine is composed proportionally EUR 5,000 for a breach of Art. 5 (1) d), f) GDPR, Art. 5 (2) GDPR and EUR 1,000 for a breach of Art. 17 GDPR.