Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

SC Cntar Tarom SA: Insufficient technical and organisational measures to ensure information security

€5,000 Fine
SC Cntar Tarom SA
ROMANIA
Art. 32 GDPR
Notified Body Responsibilities and Operational Obligations Security Notified Body Assessment Procedures Personal Data Processing Supervisory Authorities Supervision
Jul 27, 2020 Source

How it connects

Related across sources

Guidance Guidelines 04/2021 on Codes of Conduct as tools for transfers EDPB Case Law VB v Natsionalna agentsia za prihodite CJEU Guidance Guidelines 02/2022 on the application of Article 60 GDPR EDPB News Data Protection Officer or Chief Privacy Officer?The rise of the Data Protection Officer White Label Consultancy Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 EDPB Guidance Guidelines 3/2018 on the territorial scope of the GDPR (Article 3) EDPB

Full text

Unauthorised disclosure of the data of five Tarom passengers due to inadequate technical and organisational measures for secure data processing. Among other things, the company was required to take corrective action, including training its employees and conducting risk assessment procedures.

Industry: Industry and Commerce

Original document at the source www.dataprotection.ro

Similar Content