Orange Romania SA
€40,000
Non-compliance with general data processing principles
Decision Date
January 27, 2025
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Media, Telecoms and Broadcasting
Country
RO
Law
GDPRStatus
FINALDescription
The Romanian DPA has imposed a fine of EUR 40,000 on Orange Romania SA. The controller failed to fulfil a request for the erasure of data. The controller also execsevly stored and collect data of data subjects without legal basis.
Legal Citations
Art. 5Art. 6Art. 7Art. 12 (3)Art. 17
Issues & Violations
Non-compliance with general data processing principles