Romania

Meedea Construct Prest SRL

2,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-02-17.

Rank · Sector

#184

of 213 in Employment

Rank · Romania

#207

of 283

Rank · All fines

#2,380

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-02-17
Controller / Processor: Meedea Construct Prest SRL
Sector: Employment
Quoted Articles: Art. 5 (1) a), b), f), (2) GDPR, Art. 6 GDPR, Art. 9 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has imposed a fine of EUR 2,000 in Meedea Construct Prest SRL. The controller disclosed personal and health data of a former employee to a third party, who then used this data against the data subject in court.

Open original source Links to the regulator's original publication or another source.