# Compania de Apa Oltenia S.A.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Date: 2025-12-08
- Original: https://www.enforcementtracker.com/ETid-2954
- Canonical: https://overview.legal/posts/49069
- Topics: Security, Social Media, Controllers, Processing Agreement, Personal Data, Supervisory Authorities, Law Enforcement, Processing, Supervision, Data Controller

## Summary

The Romanian DPA has imposed a fine of EUR 1,000 on Compania de Apa Oltenia S.A. The controller failed to implement adequate technical and organisational measures to ensure data security, resulting in personal data beeing leaked on social media.

## Full text

The Romanian DPA has imposed a fine of EUR 1,000 on Compania de Apa Oltenia S.A. The controller failed to implement adequate technical and organisational measures to ensure data security, resulting in personal data beeing leaked on social media.

GDPR Articles: Art. 29 GDPR, Art. 32 (4) GDPR
Industry: Transportation and Energy

---
Generated by overview.legal · https://overview.legal/posts/49069 · 2026-08-22