Enforcement
EN Wens Experience SRL: Insufficient data processing agreement
€1,500 fine - Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Content
The Romanian DPA has imposed a fine of EUR 1,500 on Wens Experience SRL. In the course of its investigation, the DPA found that Wens Experience, in the course of acting as a processor on behalf of the controller, had engaged another processor to process employee data without having obtained prior authorization from the controller. This constitutes a violation of Art. 28 (2) GDPR.
GDPR Articles: Art. 28 (2) GDPR
Industry: Industry and Commerce