Romania

Enel Energie Muntenia S.A.

10,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2022-08-22.

Rank · Sector

#115

of 169 in Transportation and Energy

Rank · Romania

#39

of 285

Rank · All fines

#1,376

of 3,059

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2022-08-22
Controller / Processor: Enel Energie Muntenia S.A.
Sector: Transportation and Energy
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has fined Enel Energie Muntenia S.A. EUR 10,000. A customer had mistakenly received an email addressed to another customer containing documents with personal data of the other customer. In the course of its investigation, the DPA found that the incident had occurred due to the company's failure to take adequate technical and organizational measures to protect personal data.

Open original source Links to the regulator's original publication or another source.