Romania

Unita Turism Holding S.A.

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-09-09.

Rank · Sector

#138

of 213 in Employment

Rank · Romania

#92

of 283

Rank · All fines

#1,827

of 3,042

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-09-09
Controller / Processor: Unita Turism Holding S.A.
Sector: Employment
Quoted Articles: Art. 32 (1) b), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on Unita Turism Holding S.A. The controller did not implement adequate technical and organisational measures to ensure cybersecurity, resulting in a successful cyberattack.

Open original source Links to the regulator's original publication or another source.