Vodafone Romania S.A.
€5,000
Insufficient technical and organisational measures to ensure information security
Decision Date
28 de outubro de 2024
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Media, Telecoms and Broadcasting
Country
RO
Law
GDPRStatus
FINALDescription
The Romanian DPA fined Vodafone Romania S.A. EUR 5,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to other recipients.
Legal Citations
Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security