Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

LEGAL COMPANY & TAX HUB SRL: Insufficient technical and organisational measures to ensure information security

€3,000 Fine
LEGAL COMPANY & TAX HUB SRL
ROMANIA
Art. 32 GDPR
Data Breaches Integrity and Confidentiality Principle Security Privacy by Design & Default Personal Data Supervisory Authorities Law Enforcement Human Resources
Jul 5, 2019 Source

How it connects

Related across sources

Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) EDPB Guidance EDPB Annual Report 2023 EDPB Case Law VB v Natsionalna agentsia za prihodite CJEU Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement EDPB Guidance EDPB Annual Report 2022 EDPB Guidance Guidelines 9/2022 on personal data breach notification under GDPR EDPB

Full text

The fine was imposed because adequate technical and organizational measures to ensure a level of security appropriate to the risk of processing were not implemented. This has led to unauthorized disclosure and unauthorized access to the personal data of people who have made transactions received by the avocatoo.ro website (name, surname, mailing address, email, phone, job, details of transactions made), due to publicly accessible documents between 10th of December 2018 and 1st of February 2019. The National Supervisory Authority applied the sanction following a notification dated 12th of October 2018 indicating that a set of files regarding the details of the transactions received by the avocatoo.ro website which contained the name, surname, address correspondence, email, telephone, job and details of transactions made, was publicly accessible through two links.

Industry: Industry and Commerce

Original document at the source www.dataprotection.ro

Similar Content