Romania

LORIS FUEL SHOP SRL

1,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2022-05-12.

Rank · Sector

#524

of 597 in Industry and Commerce

Rank · Romania

#233

of 283

Rank · All fines

#2,632

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2022-05-12
Controller / Processor: LORIS FUEL SHOP SRL
Sector: Industry and Commerce
Quoted Articles: Art. 29 GDPR, Art. 32 (4) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 1,000 on the gas station operator LORIS FUEL SHOP SRL.

A person had filed a complaint with the DPA because pictures of him were published on Facebook. The images originated from a video surveillance system installed in one of the controller's gas stations.

During its investigation, the DPA found that the controller had not taken sufficient technical and organizational measures to ensure the confidentiality of the personal data generated through the CCTV system installed in the gas stations. This resulted in unauthorized third parties filming the images from the video cameras and subsequently publishing them on social networks.

Open original source Links to the regulator's original publication or another source.