Valoris Center S.R.L. – €2,000 Fine (Romania, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Valoris Center S.R.L. was fined EUR 2,000 after a call center employee accidentally sent a customer an Excel file with other customers' data. The Romanian DPA found that the company failed to have proper security measures to protect personal data. This incident shows how important it is for companies to secure customer data to avoid breaches.
What happened
A call center employee at Valoris Center S.R.L. accidentally sent a customer an Excel file containing personal data of other customers.
Who was affected
11,169 individuals whose personal data was exposed in the data breach.
What the authority found
The Romanian DPA found that Valoris Center S.R.L. did not have adequate security measures in place to protect personal data.
Why this matters
This case highlights the critical need for companies to implement strong security measures to protect customer data. It serves as a warning that even small mistakes can lead to data breaches and regulatory fines.
GDPR Articles Cited
The Romanian DPA (ANSPDCP) has imposed a fine of EUR 2,000 on Valoris Center S.R.L.. The controller notified the DPA of a data breach pursuant to Art. 33 GDPR. A call center employee of the controller had accidentally sent a customer an Excel file containing data from other customers of the controller. In the course of the investigation, it was determined that this breach resulted in the unauthorized disclosure of or access to personal data such as email address, username, user ID, phone number, customer name, customer code, customer PIN, with a total of 11169 natural persons affected by the incident. The DPA found that the controller had failed to implement technical and organizational measures to ensure a level of security appropriate to the risk to data subjects.
Related Enforcement Actions (0)
No other enforcement actions found for Valoris Center S.R.L. in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
26 November 2021
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€2,000
Enforcement Tracker ID
ETid-915
About this data
Cite as: Cookie Fines. Valoris Center S.R.L. - Romania (2021). Retrieved from cookiefines.eu
Last updated: