# Vodafone Romania S.A.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Date: 2024-10-28
- Original: https://www.enforcementtracker.com/ETid-2472
- Canonical: https://overview.legal/posts/48587
- Topics: Telecommunications, IP Address, Security, Processing Agreement, Personal Data, Supervisory Authorities, Processing, Supervision

## Summary

The Romanian DPA fined Vodafone Romania S.A. EUR 5,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to other recipients.

## Full text

The Romanian DPA fined Vodafone Romania S.A. EUR 5,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to other recipients.

GDPR Articles: Art. 32 GDPR
Industry: Media, Telecoms and Broadcasting

---
Generated by overview.legal · https://overview.legal/posts/48587 · 2026-08-22