MED LIFE S.A. – €5,000 Fine (Romania, 2022)

€5,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal24 May 2022Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Romanian data protection authority fined MED LIFE S.A. EUR 5,000 for improperly disposing of documents with sensitive patient data. This incident highlights the need for secure data handling practices. Companies should ensure they have strong measures to protect personal information from unauthorized access.

What happened

MED LIFE S.A. disposed of documents containing sensitive patient data in a publicly accessible garbage can.

Who was affected

Patients whose sensitive data was found in improperly discarded documents.

What the authority found

The authority found MED LIFE failed to implement adequate security measures to protect personal data, violating GDPR's requirements for data protection.

Why this matters

This case underscores the importance of secure data disposal practices. Organizations must ensure that personal data is protected at all stages, including when it is no longer needed, to prevent unauthorized access and potential data breaches.

GDPR Articles Cited

Art. 32(1)(b) GDPR
Full Legal Summary
Detailed

The Romanian DPA has imposed a fine of EUR 5,000 on MED LIFE S.A.. The company had disposed of documents containing sensitive patient data in a publicly accessible garbage can. An individual had found these documents and filed a complaint with the DPA. During its investigation, the DPA found that MED Life had not taken adequate technical and organizational measures to protect personal data and avoid such incidents.

Related Enforcement Actions (0)

No other enforcement actions found for MED LIFE S.A. in RO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

24 May 2022

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€5,000

Enforcement Tracker ID

ETid-1180

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. MED LIFE S.A. - Romania (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: