Meedea Construct Prest SRL
€2,000
Insufficient legal basis for data processing
Päätöspäivä
17. helmikuuta 2025
Viranomainen
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Ala
Employment
Maa
RO
Laki
GDPRTila
FINALKuvaus
The Romanian DPA has imposed a fine of EUR 2,000 in Meedea Construct Prest SRL. The controller disclosed personal and health data of a former employee to a third party, who then used this data against the data subject in court.
Oikeudelliset viittaukset
Art. 5 (1)Art. 6Art. 9
Asiat ja rikkomukset
Insufficient legal basis for data processing