Romania

Vodafone Romania

4,150 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-03-25.

Rank · Sector

#345

of 383 in Media, Telecoms and Broadcasting

Rank · Romania

#106

of 298

Rank · All fines

#1,993

of 3,223

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2020-03-25
Controller / Processor: Vodafone Romania
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The company has sent an email to a customer which contained personal data of another customer due to inadequate technical and organisational measures to ensure information security.

Open original source Links to the regulator's original publication or another source.