# Auchan România S.A.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Date: 2026-10-30
- Original: https://www.enforcementtracker.com/ETid-3416
- Canonical: https://overview.legal/posts/607775
- Topics: Supervision, Security, Supervisory Authorities, Personal Data

## Summary

The Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) fined Auchan România S.A. €8,000 for failing to implement sufficient technical and organizational measures to ensure information security, in violation of Article 32(1)(b) and (2) GDPR. The enforcement action targeted the company's inadequate safeguards for protecting personal data within the industry and commerce sector.

## Full text

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) fined Auchan România S.A. €8,000 on 2026-10-30 for: Insufficient technical and organisational measures to ensure information security.
GDPR Articles: Art. 32 (1) b), (2) GDPR
Sector: Industry and Commerce
Country: Romania
Source: https://www.dataprotection.ro/?page=Comunicat_Presa_30_10_2026

---
Generated by overview.legal · https://overview.legal/posts/607775 · 2026-11-14