GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Sanatatea Press Group S.R.L.

Country
Romania
Fine
2,000 EUR
Date
08.09.20(08.09.20)
Sector
Private Sector
Articles
Article 5(1), f)Article 32 (1) and (2)

Infringement of data integrity and confidentiality principle, Insufficient organisational and technical measures

Failure to implement adequate technical and organizational data in order to secure the processed data and to prevent the unauthorized access to personal data has led to the breach of confidentiality of personal data (i.e. e-mail addresses, usernames) of 1300 data subjects (i.e. users of the controller's electronic platform). More specifically, in the context of an online event organised by the controller, the login data was erroneously transmitted to other e-mail addresses than those used in creating an account on the electronic platform of the controller by the respective users -data subjects.