Vodafone Romania S.A.
€5,000
Insufficient technical and organisational measures to ensure information security
Data decyzji
28 października 2024
Władza
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sektor
Media, Telecoms and Broadcasting
Kraj
RO
Prawo
GDPRStatus
FINALOpis
The Romanian DPA fined Vodafone Romania S.A. EUR 5,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to other recipients.
Cytaty prawne
Art. 32
Problemy i naruszenia
Insufficient technical and organisational measures to ensure information security