Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — GENPACT ROMANIA SRL : 10 k€ (2026)
- Autorité de contrôle
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Pays
- Roumanie
- Entreprise / secteur
- GENPACT ROMANIA SRL
- Montant de l'amende
- 10 k€
- Date de la décision
- 4 février 2026
- Fondement juridique
- Art. 32 (1) b), (2)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Romanian DPA has imposed a fine of EUR 10,000 on GENPACT ROMANIA SRL. The controller suffered a successful cyber attack due to insufficient technical and organisational measures. The attacker was able to exploit vulnerabilities in some passwords and in the way user accounts' authentication could be reset.
Décision officielle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)