Romania

Veranda Obor S.A.

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2023-12-11.

Rank · Sector

#388

of 597 in Industry and Commerce

Rank · Romania

#134

of 283

Rank · All fines

#2,106

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2023-12-11
Controller / Processor: Veranda Obor S.A.
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1) b) GDPR, Art. 32 (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 3,000 on Veranda Obor S.A.. The controller had disclosed personal data (e.g. name, e-mail adress etc.) of lottery participants on its website.

Open original source Links to the regulator's original publication or another source.