Romania

WORLD TRADE CENTER BUCHAREST SA

15,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2019-07-02.

Rank · Sector

#19

of 100 in Accomodation and Hospitality

Rank · Romania

#23

of 283

Rank · All fines

#1,171

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2019-07-02
Controller / Processor: WORLD TRADE CENTER BUCHAREST SA
Sector: Accomodation and Hospitality
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The breach of data security was that a printed paper list used to check breakfast customers and containing personal data of 46 clients who stayed at the hotel's WORLD TRADE CENTER BUCHAREST SA was photographed by unauthorized people outside the company, which led to the disclosure of the personal data of some clients through online publication. The operator of WORLD TRADE CENTER BUCHAREST SA has been sanctioned because it has not taken steps to ensure that data is not disclosed to unauthorized parties.

Open original source Links to the regulator's original publication or another source.