SC CNTAR TAROM S.A.

Failure to take appropriate organisational and technical measures to guarantee that all persons acting under his authority and having access to personal data process them only in accordance with internal procedures and at his request This resulted in one employee having unauthorised access to the booking application, whereby the respective employee was able to photograph a list of personal data of 22 passengers and publish it on the Internet.