Dada Creation S.R.L. – €5,000 Fine (Romania, 2020)

€5,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal24 November 2020Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Dada Creation S.R.L. was fined for exposing customer data on its web store. Over 1000 customers' order and delivery details were available without protection, and the company failed to report the breach. This highlights the need for businesses to secure customer data and promptly report breaches.

What happened

Dada Creation S.R.L. exposed over 1000 customers' personal data on its web store without proper security measures.

Who was affected

Customers of Dada Creation S.R.L. whose order and delivery information was publicly accessible.

What the authority found

The Romanian DPA found that Dada Creation S.R.L. violated GDPR by failing to secure personal data and not reporting the breach.

Why this matters

This case underscores the importance of implementing strong security measures and the obligation to report data breaches. It serves as a warning to businesses about the consequences of neglecting data protection responsibilities.

GDPR Articles Cited

Art. 32 GDPR
Art. 33 GDPR
Full Legal Summary
Detailed

Due to inadequate technical and organizational measures, the company disclosed the order, delivery and personal data of over 1000 customers via its web store. The data was displayed on a document in the web store that could be downloaded without access protection. In addition, the operator had failed to report the security leak to the data protection authority.

Related Enforcement Actions (0)

No other enforcement actions found for Dada Creation S.R.L. in RO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

24 November 2020

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€5,000

Enforcement Tracker ID

ETid-453

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Dada Creation S.R.L. - Romania (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: