Romania

Vodafone Romania

4,150 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-03-25.

Rank · Sector

#332

of 369 in Media, Telecoms and Broadcasting

Rank · Romania

#95

of 283

Rank · All fines

#1,875

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2020-03-25
Controller / Processor: Vodafone Romania
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The company has sent an email to a customer which contained personal data of another customer due to inadequate technical and organisational measures to ensure information security.

Open original source Links to the regulator's original publication or another source.