Meedea Construct Prest SRL
€2,000
Insufficient legal basis for data processing
Date de décision
17 février 2025
Autorité
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Secteur
Employment
Pays
RO
Droit
GDPRStatut
FINALDescription
The Romanian DPA has imposed a fine of EUR 2,000 in Meedea Construct Prest SRL. The controller disclosed personal and health data of a former employee to a third party, who then used this data against the data subject in court.
Citations légales
Art. 5 (1)Art. 6Art. 9
Questions et violations
Insufficient legal basis for data processing