Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — IRIDEX GROUP SALUBRIZARE SRL : 2 k€ (2024)
- Autorité de contrôle
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Pays
- Roumanie
- Entreprise / secteur
- IRIDEX GROUP SALUBRIZARE SRL
- Montant de l'amende
- 2 k€
- Date de la décision
- 9 mai 2024
- Fondement juridique
- Art. 32 (1) b), Art. 32 (2), (3), (4)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Romanian DPA has imposed a fine of EUR 2,000 on IRIDEX GROUP SALUBRIZARE SRL. The controller had sent an e-mail to customers without using the blind copy option, revealing the email addresses of all recipients to the other recipients.
Décision officielle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)