GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Hora Credit IFN S.A.

Country
Romania
Fine
10,000 EUR
Date
2020-01-13
Sector
Private Sector
Articles
Article 5, Articles 25 and 32, Artcle 33

Breach of data accuracy and confidentiality principles; Inssuficient organisational and technical measures; Failure to comply with the deadline to notify the personal data breach to the supervisory authority

Lack of evidence of compliance with the principles of accuracy and confidentiality. Failure to take proper technical and organisational measures to avoid unauthorised disclosure of customers' personal data. Failure to notify the Romanian Data Protection Authority within 72 hours of becoming aware of the breach of personal data security.