Romania

Vodafone Romania S.A.

4,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-06-23.

Rank · Sector

#336

of 369 in Media, Telecoms and Broadcasting

Rank · Romania

#102

of 283

Rank · All fines

#1,941

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-06-23
Controller / Processor: Vodafone Romania S.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 25 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 4,000 on Vodafone Romania S.A. The controller failed to implement sufficient technical and organisational measures to ensure data security, resulting in a data breach.

Open original source Links to the regulator's original publication or another source.