La Fântâna S.R.L.
€10,000
Insufficient technical and organisational measures to ensure information security
Decision Date
1 de setembro de 2025
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Industry and Commerce
Country
RO
Law
GDPRStatus
FINALDescription
The Romanian DPA has imposed a fine of EUR 10,000 on La Fântâna S.R.L. The controller suffered a cyber attack due to insufficient technical and organisational measures to ensure data security.
Legal Citations
Art. 32 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security