GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Vodafone Romania S.A.

Country
Romania
Fine
3,000 EUR
Date
2020-03-18
Sector
Private Sector
Articles
Article 5 (1), d) and f), in conjunction withArticle 5(2)Article 32

Infringement of data accuracy and confidentiality principles

The controller misprocessed the personal data of a natural person in the context of solving her/his complaint, the response to that complaint being send to an erroneous email address. The supervisory authority concluded that such event was possible due to insufficient security measures implemented by the controller to ensure the accuracy and confidentiality of the processed data.