- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Hora Credit IFN SA – €14,000 Fine (Romania, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Hora Credit IFN SA was fined for sending personal data to the wrong email address. This incident shows the importance of having strong data accuracy and security measures in place. The fine of EUR 14,000 serves as a warning to companies about the need to handle personal data carefully.
What happened
Hora Credit IFN SA sent documents containing personal data to an incorrect email address.
Who was affected
Individuals whose personal data was mistakenly sent to the wrong email address.
What the authority found
The authority determined that Hora Credit did not have effective measures to verify data accuracy or ensure data security, violating GDPR rules.
Why this matters
This ruling emphasizes that companies must have strong data protection practices. Businesses should implement checks to ensure data is sent securely and accurately.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The sanctions were applied as a result of a complaint alleging that Hora Credit IFN SA transmitted documents containing personal data of another person to a wrong e-mail address. Following the investigation it was found that Hora Credit IFN SA processed the data without providing effective mechanisms for verifying and validating the accuracy of the data collected processed according to the principles set out in art. 5 of the GDPR. It was also found that the operator did not take sufficient security measures for personal data, according to art. 25 and 32 of the GDPR, so as to avoid unauthorized and accessible disclosure of personal data to third parties. At the same time, Hora Credit IFN SA did not notify the Supervisory Authority of the security incident that was brought to its notice, according to art. 33 of the GDPR, within 72 hours from the date it became aware of it. The fine consists of three partial fines of EUR 3000, EUR 10000 and EUR 1000.
Related Enforcement Actions (0)
No other enforcement actions found for Hora Credit IFN SA in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
10 December 2019
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€14,000
Enforcement Tracker ID
ETid-176
About this data
Cite as: Cookie Fines. Hora Credit IFN SA - Romania (2019). Retrieved from cookiefines.eu
Last updated: