Telekom Romania Communications SA
Non-compliance with general data processing principles
Beslissingsdatum
6 december 2021
Autoriteit
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Media, Telecoms and Broadcasting
Land
RO
Wet
GDPRStatus
FINALBeschrijving
The Romanian DPA (ANSPDCP) imposed a fine of EUR 6,000 on Telekom Romania Communications SA. A data subject had complained that the controller had sent invoices and messages to his email address informing him of another person's payment arrears. During the investigation, the DPA found that the controller had collected and processed certain personal data in error, resulting in the unlawful disclosure of the personal data. At the same time, the DPA found that the controller had not taken the necessary measures to comply with the data subject's request for deletion of his personal data. The fine is composed proportionally EUR 5,000 for a breach of Art. 5 (1) d), f) GDPR, Art. 5 (2) GDPR and EUR 1,000 for a breach of Art. 17 GDPR.