Romania

Unirea Medical Center S.R.L.

2,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-01-03.

Rank · Sector

#252

of 293 in Health Care

Rank · Romania

#221

of 302

Rank · All fines

#2,548

of 3,275

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-01-03
Controller / Processor: Unirea Medical Center S.R.L.
Sector: Health Care
Quoted Articles: Art. 24 GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 2,000 on Unirea Medical Center S.R.L. The controller publicly exposed the access credentials for a data subject's email account on a workstation.

Open original source Links to the regulator's original publication or another source.