Skip to content
Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Dada Creation S.R.L.: Insufficient technical and organisational measures to ensure information security

€5,000 Fine
Dada Creation S.R.L.
ROMANIA
Art. 32 GDPR Art. 33 GDPR

How it connects

Full text

Due to inadequate technical and organizational measures, the company disclosed the order, delivery and personal data of over 1000 customers via its web store. The data was displayed on a document in the web store that could be downloaded without access protection. In addition, the operator had failed to report the security leak to the data protection authority.

Industry: Industry and Commerce

Similar Content