Romania

CVA TAX & FINANCE S.R.L.

2,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-05-14.

Rank · Sector

#288

of 327 in Finance, Insurance and Consulting

Rank · Romania

#221

of 292

Rank · All fines

#2,414

of 3,085

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-05-14
Controller / Processor: CVA TAX & FINANCE S.R.L.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 32 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 2,000 CVA TAX & FINANCE S.R.L. The controller did not implement sufficient technical and organisational measures to ensure information security, resulting in a data breach and the restriction of access to data.

Open original source Links to the regulator's original publication or another source.