Vodafone Romania – €4,150 Fine (Romania, 2020)

€4,150Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal25 March 2020Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Vodafone Romania was fined for sending an email to a customer that mistakenly included another customer's personal data. This happened because Vodafone didn't have strong enough security measures in place. This case highlights the importance of protecting customer information to avoid data breaches.

What happened

Vodafone Romania sent an email containing personal data of one customer to another customer by mistake.

Who was affected

Customers of Vodafone Romania whose personal data was mistakenly shared with other customers.

What the authority found

The authority found that Vodafone Romania failed to implement adequate security measures to protect personal data, violating GDPR's requirements for information security.

Why this matters

This case underscores the need for companies to have strong technical and organizational measures to prevent accidental data leaks. It serves as a reminder for businesses to regularly review and strengthen their data security practices.

GDPR Articles Cited

Art. 32 GDPR
Full Legal Summary
Detailed

The company has sent an email to a customer which contained personal data of another customer due to inadequate technical and organisational measures to ensure information security.

Details

Fine Date

25 March 2020

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€4,150

Enforcement Tracker ID

ETid-263

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Vodafone Romania - Romania (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: