WORLD TRADE CENTER BUCHAREST SA
€15,000
Insufficient technical and organisational measures to ensure information security
Datum odločitve
2. julij 2019
Organ
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sektor
Accomodation and Hospitality
Država
RO
Zakon
GDPRStatus
FINALOpis
The breach of data security was that a printed paper list used to check breakfast customers and containing personal data of 46 clients who stayed at the hotel's WORLD TRADE CENTER BUCHAREST SA was photographed by unauthorized people outside the company, which led to the disclosure of the personal data of some clients through online publication. The operator of WORLD TRADE CENTER BUCHAREST SA has been sanctioned because it has not taken steps to ensure that data is not disclosed to unauthorized parties.
Pravne navedbe
Art. 32
Vprašanja in kršitve
Insufficient technical and organisational measures to ensure information security