Romania

Maravet S.R.L.

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-05-19.

Rank · Sector

#191

of 270 in Health Care

Rank · Romania

#89

of 283

Rank · All fines

#1,831

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-05-19
Controller / Processor: Maravet S.R.L.
Sector: Health Care
Quoted Articles: Art. 32 (1) b), d), (2), (4) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on Maravet S.R.L. The controller did not implement sufficient technical and organisational measures to ensure information security, resulting in a data breach.

Open original source Links to the regulator's original publication or another source.