Meedea Construct Prest SRL
€2,000
Insufficient legal basis for data processing
Datum för beslut
17 februari 2025
Myndighet
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sektor
Employment
Land
RO
Lag
GDPRStatus
FINALBeskrivning
The Romanian DPA has imposed a fine of EUR 2,000 in Meedea Construct Prest SRL. The controller disclosed personal and health data of a former employee to a third party, who then used this data against the data subject in court.
Rättsliga hänvisningar
Art. 5 (1)Art. 6Art. 9
Frågor och överträdelser
Insufficient legal basis for data processing