Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — Actamedica SRL : 3 k€ (2021)
- Autorité de contrôle
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Pays
- Roumanie
- Entreprise / secteur
- Actamedica SRL
- Montant de l'amende
- 3 k€
- Date de la décision
- 24 août 2021
- Fondement juridique
- Art. 28 (1), Art. 32, Art. 33
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Romanian DPA (ANSPDCP) has fined Actamedica SRL EUR 3,000. The controller had informed a private individual about the loss of her biological samples and a sum of money sent via a courier service. When asked what personal data had been disclosed on this occasion and whether the ANSPDCP had been informed of this incident, the controller only provided the contact details of his lawyer and an e-mail address of the courier service to which the private individual could address her complaint. The ANSPDCP found a breach of the controller's obligation to implement technical and organizational measures to ensure a level of protection appropriate to the risk to data subjects, as well as a breach of the controller's obligation to notify the ANSPDCP of the data breach.
Décision officielle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)