Vodafone Romania S.A.
€5,000
Insufficient technical and organisational measures to ensure information security
Date de décision
28 octobre 2024
Autorité
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Secteur
Media, Telecoms and Broadcasting
Pays
RO
Droit
GDPRStatut
FINALDescription
The Romanian DPA fined Vodafone Romania S.A. EUR 5,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to other recipients.
Citations légales
Art. 32
Questions et violations
Insufficient technical and organisational measures to ensure information security