Romania

Alianța pentru Unirea Românilor

10,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2023-03-15.

Rank · Sector

#38

of 351 in Individuals and Private Associations

Rank · Romania

#40

of 282

Rank · All fines

#1,376

of 3,039

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2023-03-15
Controller / Processor: Alianța pentru Unirea Românilor
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) c) GDPR, Art. 5 (2) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Romanian DPA imposed a fine of EUR 10,000 on Alianța pentru Unirea Românilor. During its investigation, the DPA found that the controller collected personal data on its website without informing the data subjects and without meeting the conditions for the lawfulness of the processing.
The DPA also found that the controller collected data such as surname, first name, address, ID card number, etc. not only on its website but also through various forms to be filled in. The DPA considered this to be a violation of the principle of data minimization.

Open original source Links to the regulator's original publication or another source.