Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — Telekom Romania Communications SA : 6 k€ (2021)
- Autorité de contrôle
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Pays
- Roumanie
- Entreprise / secteur
- Telekom Romania Communications SA
- Montant de l'amende
- 6 k€
- Date de la décision
- 6 décembre 2021
- Fondement juridique
- Art. 5 (1) d), f), Art. 5 (2), Art. 17
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Romanian DPA (ANSPDCP) imposed a fine of EUR 6,000 on Telekom Romania Communications SA. A data subject had complained that the controller had sent invoices and messages to his email address informing him of another person's payment arrears. During the investigation, the DPA found that the controller had collected and processed certain personal data in error, resulting in the unlawful disclosure of the personal data. At the same time, the DPA found that the controller had not taken the necessary measures to comply with the data subject's request for deletion of his personal data. The fine is composed proportionally EUR 5,000 for a breach of Art. 5 (1) d), f) GDPR, Art. 5 (2) GDPR and EUR 1,000 for a breach of Art. 17 GDPR.
Décision officielle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)