Meedea Construct Prest SRL
€2,000
Insufficient legal basis for data processing
결정 날짜
2025년 2월 17일
권한
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
섹터
Employment
국가
RO
법률
GDPR상태
FINAL설명
The Romanian DPA has imposed a fine of EUR 2,000 in Meedea Construct Prest SRL. The controller disclosed personal and health data of a former employee to a third party, who then used this data against the data subject in court.
법적 인용
Art. 5 (1)Art. 6Art. 9
문제 및 위반 사항
Insufficient legal basis for data processing