Romania

Apă Canal Ilfov SA

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2023-01-04.

Rank · Sector

#380

of 597 in Industry and Commerce

Rank · Romania

#123

of 283

Rank · All fines

#2,077

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2023-01-04
Controller / Processor: Apă Canal Ilfov SA
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1) b) GDPR, Art. 32 (2) GDPR, Art. 32 (4) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 3,000 on Apă Canal Ilfov SA. The controller sent an e-mail with personal data to several recipients in an open distribution list. This made it possible for the recipients to view the e-mail addresses of all other recipients.

Open original source Links to the regulator's original publication or another source.