Romania

Vodafone Romania

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-02-11.

Rank · Sector

#348

of 377 in Media, Telecoms and Broadcasting

Rank · Romania

#118

of 296

Rank · All fines

#2,087

of 3,170

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2020-02-11
Controller / Processor: Vodafone Romania
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

Vodafone Romania had incorrectly processed personal data of an individual in order to process a complaint, which was subsequently sent to a wrong e-mail address. The reason for this was that there were insufficient security measures in place to prevent such erroneous data processing.

Open original source Links to the regulator's original publication or another source.