Compania Nationala Posta Romana

The national operator of post services was sanctioned for failure to implement appropriate organisational and technical measures (such as pseudo-anonimisation). Personal data (emails and phone numbers of data subjects) could be accesed without authorization on the company's web site managing the awb status.