Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — NN Asigurări de Viață S.A. : 1 k€ (2023)
- Autorité de contrôle
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Pays
- Roumanie
- Entreprise / secteur
- NN Asigurări de Viață S.A.
- Montant de l'amende
- 1 k€
- Date de la décision
- 12 mai 2023
- Fondement juridique
- Art. 32 (1) b), d), Art. 32 (2)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Romanian DPA has imposed a fine of EUR 1,00 on the insurance company NN Asigurări de Viață S.A.. The controller had notified the authority of a data breach pursuant to Art. 33 GDPR. The controller had made a number of technical changes to its systems that allowed some website visitors to access personal data of other individuals. This led to the unauthorized access of personal data such as name, ID card number, email, etc. of two individuals. During its investigation, the DPA found that the controller had failed to take appropriate technical and organizational measures to protect personal data, which facilitated such an incident.
Décision officielle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)