Romania

UTTIS INDUSTRIES SRL

2,500 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2019-10-17.

Rank · Sector

#171

of 213 in Employment

Rank · Romania

#155

of 283

Rank · All fines

#2,170

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2019-10-17
Controller / Processor: UTTIS INDUSTRIES SRL
Sector: Employment
Quoted Articles: Art. 12 GDPR, Art. 13 GDPR, Art. 5 (1) c) GDPR, Art. 6 GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

The sanctions were applied to the controller because he could not prove that the data subjects were informed about the processing of personal data / images through the video surveillance system, which they have been operating since 2016. And because he made the disclosure of the CNP of the employees, by displaying the Report for the training of the authorized ISCIR personnel for the year 2018 to the company notifier and could not prove the legality of the processing of the CNP, by disclosure, according to Art. 6 GDPR.

Open original source Links to the regulator's original publication or another source.