Enforcement
EN BRD-Groupe Société Générale S.A.: Non-compliance with general data processing principles
€2,000 fine - Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Content
The Romanian DPA has imposed a fine of EUR 2,000 on BRD-Groupe Société Générale S.A.. The controller had reported a data breach to the DPA. During its investigation, the DPA found that the controller had unlawfully disclosed personal data of a bank client and other individuals.
GDPR Articles: Art. 5 (1) a), b), f) GDPR, Art. 5 (2) GDPR
Industry: Finance, Insurance and Consulting