Telekom Romania
€3,000
Insufficient technical and organisational measures to ensure information security
Decision Date
June 11, 2020
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Media, Telecoms and Broadcasting
Country
RO
Law
GDPRStatus
FINALDescription
Inadequate security measures of the company had led to unlawful processing of personal data without verifying their accuracy. For this reason, a fine was imposed on Telekom Romania for violation of Article 32 of the GDPR, and the introduction of effective mechanisms to identify and protect data from unauthorised disclosure and unlawful processing is ordered to ensure compliance with the GDPR.
Legal Citations
Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security