Romania

Veranda Obor S.A.

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2023-12-11.

Rank · Sector

#389

of 599 in Industry and Commerce

Rank · Romania

#135

of 285

Rank · All fines

#2,112

of 3,059

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2023-12-11
Controller / Processor: Veranda Obor S.A.
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1) b) GDPR, Art. 32 (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 3,000 on Veranda Obor S.A.. The controller had disclosed personal data (e.g. name, e-mail adress etc.) of lottery participants on its website.

Open original source Links to the regulator's original publication or another source.