Unirea Medical Center S.R.L.
€2,000
Insufficient technical and organisational measures to ensure information security
Decision Date
3 de janeiro de 2025
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Health Care
Country
RO
Law
GDPRStatus
FINALDescription
The Romanian DPA has imposed a fine of EUR 2,000 on Unirea Medical Center S.R.L. The controller publicly exposed the access credentials for a data subject's email account on a workstation.
Legal Citations
Art. 24Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security