Romania

Vodafone Romania

4,150 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-03-25.

Rank · Sector

#334

of 371 in Media, Telecoms and Broadcasting

Rank · Romania

#102

of 292

Rank · All fines

#1,899

of 3,085

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2020-03-25
Controller / Processor: Vodafone Romania
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The company has sent an email to a customer which contained personal data of another customer due to inadequate technical and organisational measures to ensure information security.

Open original source Links to the regulator's original publication or another source.