Romania

Civil law firm "Sabou, Burz & Cuc"

1,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2022-02-22.

Rank · Sector

#306

of 322 in Finance, Insurance and Consulting

Rank · Romania

#231

of 283

Rank · All fines

#2,628

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2022-02-22
Controller / Processor: Civil law firm "Sabou, Burz & Cuc"
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) a), b), c), f) GDPR, Art. 5 (2) GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has fined the civil law firm "Sabou, Burz & Cuc" EUR 1,000. The DPA launched an investigation after a client complained that the controller had published their personal data in a WhatsApp group used by several lawyers of a bar association without their prior consent. The DPA found that the controller had processed the data without a valid legal basis, as they had published the data for a purpose other than that originally agreed with the data subject.

Open original source Links to the regulator's original publication or another source.