LEGAL COMPANY & TAX HUB SRL

€3,000

Insufficient technical and organisational measures to ensure information security

Päätöspäivä

5. heinäkuuta 2019

Viranomainen

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

RO

Ala

Industry and Commerce

Maa

RO

Laki

GDPR

Tila

FINAL

Kuvaus

The fine was imposed because adequate technical and organizational measures to ensure a level of security appropriate to the risk of processing were not implemented. This has led to unauthorized disclosure and unauthorized access to the personal data of people who have made transactions received by the avocatoo.ro website (name, surname, mailing address, email, phone, job, details of transactions made), due to publicly accessible documents between 10th of December 2018 and 1st of February 2019. The National Supervisory Authority applied the sanction following a notification dated 12th of October 2018 indicating that a set of files regarding the details of the transactions received by the avocatoo.ro website which contained the name, surname, address correspondence, email, telephone, job and details of transactions made, was publicly accessible through two links.

Oikeudelliset viittaukset

Art. 32

Asiat ja rikkomukset

Insufficient technical and organisational measures to ensure information security

Pysy ajan tasalla yksityisyyden suojan valvonnasta

Kunnioitamme yksityisyyttäsi. Yksi sähköpostiviesti kuukaudessa, ei roskapostia, peruuta tilaus milloin tahansa.