Romania

BRISTOL LOGISTICS SA

2,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2023-01-12.

Rank · Sector

#151

of 167 in Transportation and Energy

Rank · Romania

#192

of 283

Rank · All fines

#2,329

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2023-01-12
Controller / Processor: BRISTOL LOGISTICS SA
Sector: Transportation and Energy
Quoted Articles: Art. 32 (1) b) GDPR, Art. 32 (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 10,000 on BRISTOL LOGISTICS SA. The DPA received a notification from BRISTOL LOGISTICS SA of a personal data breach under Art. 33 GDPR. The notification stated that a binder containing the personnel files of 12 employees had been stolen, which led to unauthorized persons having access to personal data. The DPA considered this to be a violation of Art. 32 GDPR, as the municipality had failed to implement appropriate technical and organizational measures to ensure a level of protection commensurate with the risk.

Open original source Links to the regulator's original publication or another source.