LEGAL COMPANY & TAX HUB SRL

€3,000

Insufficient technical and organisational measures to ensure information security

決定日期

2019年7月5日

權限

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

RO

部門

Industry and Commerce

國家

RO

法律

GDPR

狀態

FINAL

說明

The fine was imposed because adequate technical and organizational measures to ensure a level of security appropriate to the risk of processing were not implemented. This has led to unauthorized disclosure and unauthorized access to the personal data of people who have made transactions received by the avocatoo.ro website (name, surname, mailing address, email, phone, job, details of transactions made), due to publicly accessible documents between 10th of December 2018 and 1st of February 2019. The National Supervisory Authority applied the sanction following a notification dated 12th of October 2018 indicating that a set of files regarding the details of the transactions received by the avocatoo.ro website which contained the name, surname, address correspondence, email, telephone, job and details of transactions made, was publicly accessible through two links.

法律引文

Art. 32

問題與違規

Insufficient technical and organisational measures to ensure information security

保持最新的隱私權執法資訊

我們尊重您的隱私。每月一封電子郵件,無垃圾郵件,可隨時取消訂閱。