GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

S.C. Medicover S.R.L.

Country
Romania
Fine
2,000 EUR
Date
23.03.21(23.03.21)
Sector
Private Sector
Articles
Article 32 (1),b), (2) and (4)

Lack of appropriate organisational and technical measures

Failure of the controller to implement appropriate organisational and technical measures to ensure that all individuals acting under the controller’s authority and who have access to personal data will processes such data based only on the controller’s request has led to unauthorised disclosure and access to personal data transmitted to individuals other than the recipients.