Romania

Enel Energie

4,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-06-18.

Rank · Sector

#137

of 167 in Transportation and Energy

Rank · Romania

#96

of 283

Rank · All fines

#1,885

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2020-06-18
Controller / Processor: Enel Energie
Sector: Transportation and Energy
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

Failure to take adequate measures to prevent unauthorised disclosure of personal data. The fine was preceded by a complaint about the disclosure of personal data of the data subject to another customer by e-mail.

Open original source Links to the regulator's original publication or another source.