Telekom Romania Mobile Communications S.A.

€10,000

Insufficient technical and organisational measures to ensure information security

Дата принятия решения

30 марта 2021 г.

Авторитет

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

RO

Сектор

Media, Telecoms and Broadcasting

Страна

RO

Закон

GDPR

Статус

FINAL

Описание

The Romania DPA (ANSPDCP) has fined Telekom Romania Mobile Communications S.A. EUR 10,000 for failing to implement adequate security measures to ensure the security of personal data processing. In particular, the ANSPDCP's investigation revealed that the controllers' failure to implement adequate security measures resulted in the unauthorized disclosure of the data of 99,210 data subjects, including their customer number, gender and telephone number, as well as unauthorized access to the personal data stored in the accounts of 413 customers. On this basis, the ANSPDCP ruled that the controller violated Art. 32 (1) and (2) GDPR.

Юридические цитаты

Art. 32 (1)

Проблемы и нарушения

Insufficient technical and organisational measures to ensure information security

Будьте в курсе событий, связанных с соблюдением конфиденциальности

Мы уважаем вашу конфиденциальность. Одно письмо в месяц, без спама, отказ от подписки в любое время.