GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

CNTAR TAROM SA

Country
Romania
Fine
5,000 EUR
Date
27.07.20(27.07.20)
Sector
Private Sector
Articles
Article 32 (1) b), (2) and (4)

Lack of appropriate organisational and technical measures

Failure to implement adequate technical and organizational measures to ensure that every individual acting under the controller's authority and who has access to personal data will processes such data only at the controller's request and instruction. This has led to unauthorized access and disclosure of personal data of five data subjects.