ROUMASPORT SRL: Insufficient legal basis for data processing

€5,000 fine - Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

€5,000 Fine

ROUMASPORT SRL

ROMANIA

Insufficient legal basis for data processing

May 9, 2025 Source

Content

The Romanian DPA has imposed a fine of EUR 5,000 on ROUMASPORT SRL. The controller accessed surveillance cameras to monitor its employees without a sufficient legal basis. The controller also used the data for disciplinary purposes.

GDPR Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) GDPR
Industry: Employment