News · GDPRhub EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

ANSPDCP (Romania) - Fine against Homelux SRL

Cookies Data Breaches Supervisory Authorities Notification Obligation Personal Data Controllers Consent
Aug 6, 2026 Source

How it connects

Related across sources

Enforcement NAIH fines online store HUF 2M for unclear and incomplete privacy notice NAIH (Hungary) Guidance EDPB Annual Report 2025 EDPB Literature If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation Computer law & security review Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) EDPB Guidance EDPB Annual Report 2023 EDPB Guidance Contribution of the EDPB to the report on the application of the GDPR under Article 97 - 2023 EDPB

Full text

The DPA fined a home and furniture retailer RON 78,570 (€15,000) after a cyberattack exploited an outdated website platform and weak passwords. It also imposed a RON 30,000 (€5,715) fine for placing non-essential cookies without consent. English Summary. Facts. HOMELUX S.R.L. (the controller) notified the Romanian DPA (ANSPDCP) of a personal data breach pursuant to Article 33 GDPR. The controller was operating a website on a platform that had not been updated to the latest version released by the software provider. Thus, a cyberattack exploited this vulnerability and affected the personal data processed through the website. This incident was further facilitated by weak password requirements for user accounts, a deficiency that remained unremedied after the breach. As a result, personal data processed by the controller, including names, surnames, addresses, email addresses, and passwords, was disclosed to unauthorised parties. During the investigation, the DPA also found that the contro

Original document at the source gdprhub.eu

Similar Content