Enforcement
EN Enel Energie: Insufficient technical and organisational measures to ensure information security
€4,000 fine - Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Content
Failure to take adequate measures to prevent unauthorised disclosure of personal data. The fine was preceded by a complaint about the disclosure of personal data of the data subject to another customer by e-mail.
GDPR Articles: Art. 32 GDPR
Industry: Transportation and Energy