Enforcement
EN

S.P.E.E.H. HIDROELECTRICA SA: Insufficient technical and organisational measures to ensure information security

€5,000 fine - Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

€5,000 Fine
S.P.E.E.H. HIDROELECTRICA SA
ROMANIA
Insufficient technical and organisational measures to ensure information security
Oct 20, 2025 Source

Content

The Romanian DPA has imposed a fine of EUR 5,000 on S.P.E.E.H. HIDROELECTRICA SA. A technical error in the controller's computer systems was exploited by attackers to cause a cyber incident.

GDPR Articles: Art. 32 (1) b), d), (4) GDPR
Industry: Transportation and Energy