Romania

FARMEC SA

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-02-05.

Rank · Sector

#310

of 599 in Industry and Commerce

Rank · Romania

#84

of 285

Rank · All fines

#1,831

of 3,059

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-02-05
Controller / Processor: FARMEC SA
Sector: Industry and Commerce
Quoted Articles: Art. 25 (1) GDPR, Art. 32 (1), b), d), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on FARMEC SA. The controller failed to implement sufficient technical and organisational measures to ensure data security, resulting in a data breach.

Open original source Links to the regulator's original publication or another source.