Romania

Vodafone Romania S.A.

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2024-10-28.

Rank · Sector

#328

of 369 in Media, Telecoms and Broadcasting

Rank · Romania

#82

of 283

Rank · All fines

#1,820

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2024-10-28
Controller / Processor: Vodafone Romania S.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA fined Vodafone Romania S.A. EUR 5,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to other recipients.

Open original source Links to the regulator's original publication or another source.