GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

World Class România S.A.

Country
Romania
Fine
2,000 EUR
Date
07.05.21(07.05.21)
Sector
Private Sector
Articles
Article 32

Insufficient organisational and technical measures

Failure of the controller to implement sufficient security measures in order to ensure the confidentiality of processed personal data has led to unauthorised disclosure of personal data of an employee of the controller (i.e. name, surname, address, ID number and series, personal identification number, information related to the request regarding the termination of the employment relationship) to third parties, on a social media platform (i.e. Whatsapp).