Vodafone Romania S.A.
€5,000
Insufficient technical and organisational measures to ensure information security
결정 날짜
2024년 10월 28일
권한
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
섹터
Media, Telecoms and Broadcasting
국가
RO
법률
GDPR상태
FINAL설명
The Romanian DPA fined Vodafone Romania S.A. EUR 5,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to other recipients.
법적 인용
Art. 32
문제 및 위반 사항
Insufficient technical and organisational measures to ensure information security