MED LIFE S.A. – €5,000 Fine (Romania, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Romanian data protection authority fined MED LIFE S.A. EUR 5,000 for improperly disposing of documents with sensitive patient data. This incident highlights the need for secure data handling practices. Companies should ensure they have strong measures to protect personal information from unauthorized access.
What happened
MED LIFE S.A. disposed of documents containing sensitive patient data in a publicly accessible garbage can.
Who was affected
Patients whose sensitive data was found in improperly discarded documents.
What the authority found
The authority found MED LIFE failed to implement adequate security measures to protect personal data, violating GDPR's requirements for data protection.
Why this matters
This case underscores the importance of secure data disposal practices. Organizations must ensure that personal data is protected at all stages, including when it is no longer needed, to prevent unauthorized access and potential data breaches.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 15 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Romanian DPA has imposed a fine of EUR 5,000 on MED LIFE S.A.. The company had disposed of documents containing sensitive patient data in a publicly accessible garbage can. An individual had found these documents and filed a complaint with the DPA. During its investigation, the DPA found that MED Life had not taken adequate technical and organizational measures to protect personal data and avoid such incidents.
Related Enforcement Actions (0)
No other enforcement actions found for MED LIFE S.A. in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
24 May 2022
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€5,000
About this data
Cite as: Cookie Fines. MED LIFE S.A. - Romania (2022). Retrieved from cookiefines.eu
Last updated: