Unita Turism Holding S.A.
€5,000
Insufficient technical and organisational measures to ensure information security
Fecha de la decisión
9 de septiembre de 2025
Autoridad
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Employment
País
RO
Ley
GDPREstado
FINALDescripción
The Romanian DPA has imposed a fine of EUR 5,000 on Unita Turism Holding S.A. The controller did not implement adequate technical and organisational measures to ensure cybersecurity, resulting in a successful cyberattack.
Citas legales
Art. 32 (1)
Problemas e infracciones
Insufficient technical and organisational measures to ensure information security