GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

FAN COURIER EXPRESS S.R.L.

Country
Romania
Fine
11,000 EUR
Date
2019-10-25
Sector
Private Sector
Articles
Article 32Article 5 (1),f)

Lack of required organisational and technical measures

Failure to implement adequate technical and organizational measures to ensure a level of security corresponding to the risk of the processing, which led to the loss of personal data (name, surname, card number, security card, card holder address, personal identification number, serial number and identity card number , IBAN account number, approved credit limit, correspondence address) and the unuathorized access to such data of over 1,100 individuals.