Romania

Compania Națională Poșta Română S.A.

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2023-05-16.

Rank · Sector

#134

of 167 in Transportation and Energy

Rank · Romania

#79

of 283

Rank · All fines

#1,794

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2023-05-16
Controller / Processor: Compania Națională Poșta Română S.A.
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) a) GDPR, Art. 5 (2) GDPR, Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on the Romanian Post (Compania Națională Poșta Română S.A.). During its investigation, the DPA found that the controller had processed personal data of employees without a valid legal basis.

Open original source Links to the regulator's original publication or another source.