Meedea Construct Prest SRL
€2,000
Insufficient legal basis for data processing
Fecha de la decisión
17 de febrero de 2025
Autoridad
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Employment
País
RO
Ley
GDPREstado
FINALDescripción
The Romanian DPA has imposed a fine of EUR 2,000 in Meedea Construct Prest SRL. The controller disclosed personal and health data of a former employee to a third party, who then used this data against the data subject in court.
Citas legales
Art. 5 (1)Art. 6Art. 9
Problemas e infracciones
Insufficient legal basis for data processing