Vodafone Romania
€3,000
Insufficient technical and organisational measures to ensure information security
Decision Date
11 de fevereiro de 2020
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Media, Telecoms and Broadcasting
Country
RO
Law
GDPRStatus
FINALDescription
Vodafone Romania had incorrectly processed personal data of an individual in order to process a complaint, which was subsequently sent to a wrong e-mail address. The reason for this was that there were insufficient security measures in place to prevent such erroneous data processing.
Legal Citations
Art. 5 (1)Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security