Romania

Global Customer Care Services S.R.L.

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-10-02.

Rank · Sector

#336

of 628 in Industry and Commerce

Rank · Romania

#103

of 296

Rank · All fines

#1,933

of 3,170

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-10-02
Controller / Processor: Global Customer Care Services S.R.L.
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1) b), d) GDPR, Art. 32 (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on Global Customer Care Services S.R.L. The controller informed the authority of a breach of personal data security. The cyber attack on the controller's infrastructure affected confidentiality and availability, giving unauthorised third parties access. The data subjects are employees and former employees, among others. The affected data includes names, contact details, educational and professional qualifications, salaries, ID documents, bank account details and residences. The subsequent investigation found that the controller had not taken adequate measures to ensure the security of the personal data being processed.

Open original source Links to the regulator's original publication or another source.