LORIS FUEL SHOP SRL

€1,000

Insufficient technical and organisational measures to ensure information security

Fecha de la decisión

12 de mayo de 2022

Autoridad

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

RO

Sector

Industry and Commerce

País

RO

Ley

GDPR

Estado

FINAL

Descripción

The Romanian DPA has imposed a fine of EUR 1,000 on the gas station operator LORIS FUEL SHOP SRL. A person had filed a complaint with the DPA because pictures of him were published on Facebook. The images originated from a video surveillance system installed in one of the controller's gas stations. During its investigation, the DPA found that the controller had not taken sufficient technical and organizational measures to ensure the confidentiality of the personal data generated through the CCTV system installed in the gas stations. This resulted in unauthorized third parties filming the images from the video cameras and subsequently publishing them on social networks.

Citas legales

Art. 29Art. 32 (4)

Problemas e infracciones

Insufficient technical and organisational measures to ensure information security

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.