Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — BRISTOL LOGISTICS SA : 2 k€ (2023)
- Autorité de contrôle
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Pays
- Roumanie
- Entreprise / secteur
- BRISTOL LOGISTICS SA
- Montant de l'amende
- 2 k€
- Date de la décision
- 12 janvier 2023
- Fondement juridique
- Art. 32 (1) b), Art. 32 (2)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Romanian DPA has imposed a fine of EUR 10,000 on BRISTOL LOGISTICS SA. The DPA received a notification from BRISTOL LOGISTICS SA of a personal data breach under Art. 33 GDPR. The notification stated that a binder containing the personnel files of 12 employees had been stolen, which led to unauthorized persons having access to personal data. The DPA considered this to be a violation of Art. 32 GDPR, as the municipality had failed to implement appropriate technical and organizational measures to ensure a level of protection commensurate with the risk.
Décision officielle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)