Romania

S.P.E.E.H. HIDROELECTRICA S.A

15,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-01-31.

Rank · Sector

#107

of 167 in Transportation and Energy

Rank · Romania

#28

of 283

Rank · All fines

#1,213

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-01-31
Controller / Processor: S.P.E.E.H. HIDROELECTRICA S.A
Sector: Transportation and Energy
Quoted Articles: Art. 25 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 15,000 on S.P.E.E.H. HIDROELECTRICA S.A. The controller failed to implement sufficient technical and organisational measures to ensure data security, resulting in a data breach.

Open original source Links to the regulator's original publication or another source.