Enel Energie Muntenia SA – €3,000 Fine (Romania, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Enel Energie Muntenia SA was fined €3,000 for mistakenly sending a customer's personal data to another client. The company lacked proper security measures to protect personal data. This case shows the need for strong data protection practices to prevent accidental data breaches.
What happened
Enel Energie Muntenia SA sent a customer's personal data to the wrong email address, belonging to another client.
Who was affected
Customers whose personal data was mishandled by Enel Energie Muntenia SA.
What the authority found
The Romanian Data Protection Authority found that the company did not have adequate security measures in place, violating GDPR's requirements for data protection.
Why this matters
This case highlights the importance of implementing robust security measures to protect personal data. Companies should ensure that their systems prevent unauthorized data sharing and protect customer information from accidental breaches.
GDPR Articles Cited
The energy company Enel Energie Muntenia SA was investigated after a notification sent by a customer to the DPA. The ANSPDCP found that Enel Energie Muntenia SA transmitted a client's personal data to the e-mail address of another client. The DPA decided that the controller did not have adequate technical and organizational measures in place to ensure a level of security that corresponds to the risk of the processing. Thus, the controller violated the security of processing as required by Article 32 GDPR and the DPA imposed the fine of 14,423.7 lei (approx. EUR. 3,000) and ordered the controller to take the necessary measures within 30 days.
Related Enforcement Actions (0)
No other enforcement actions found for Enel Energie Muntenia SA in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
25 February 2020
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€3,000
GDPRhub ID
gdprhub-2246About this data
Cite as: Cookie Fines. Enel Energie Muntenia SA - Romania (2020). Retrieved from cookiefines.eu
Last updated: