GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

WORLD TRADE CENTER BUCHAREST S.A.

Country
Romania
Fine
15,000 EUR
Date
2019-07-08
Sector
Private Sector
Articles
Article 32

Lack of required organisational and technical measures

Failure to take measures to guarantee that the data is not disclosed to unauthorised persons. A printed paper list used to control breakfast participation, which includes the personal data of 46 customers who stayed at the data controller's hotel, was photographed by unauthorised persons and disclosed through online publication.