Romania

SC Cntar Tarom SA

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-07-27.

Rank · Sector

#284

of 595 in Industry and Commerce

Rank · Romania

#67

of 283

Rank · All fines

#1,707

of 3,042

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2020-07-27
Controller / Processor: SC Cntar Tarom SA
Sector: Industry and Commerce
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

Unauthorised disclosure of the data of five Tarom passengers due to inadequate technical and organisational measures for secure data processing. Among other things, the company was required to take corrective action, including training its employees and conducting risk assessment procedures.

Open original source Links to the regulator's original publication or another source.