Meedea Construct Prest SRL
€2,000
Insufficient legal basis for data processing
Data della decisione
17 febbraio 2025
Autorità
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Settore
Employment
Paese
RO
Legge
GDPRStato
FINALDescrizione
The Romanian DPA has imposed a fine of EUR 2,000 in Meedea Construct Prest SRL. The controller disclosed personal and health data of a former employee to a third party, who then used this data against the data subject in court.
Citazioni legali
Art. 5 (1)Art. 6Art. 9
Problemi e violazioni
Insufficient legal basis for data processing