- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Compania Națională Poșta Română – €1,937 Fine (Romania, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Romanian National Post Company was fined for not having proper security measures to protect personal data. This led to unauthorized access to sensitive information like email addresses and phone numbers. This case serves as a reminder for companies to implement strong data protection practices.
What happened
The National Supervisory Authority found that the Romanian National Post Company failed to secure personal data adequately.
Who was affected
Eighty-one individuals whose personal data was accessed without authorization were affected.
What the authority found
The authority determined that the company breached GDPR Article 32 by not implementing necessary security measures.
Why this matters
This case highlights the critical need for businesses to prioritize data security. Companies should review their data protection strategies to prevent unauthorized access.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Entities Involved
Source checks
Linked-source text retrieved.
Review needed — 16 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The National Supervisory Authority conducted an investigation into the Romanian National Post Company, and found that it did not implement adequate technical and organizational measures (such as pseudonymization) when processing personal data. This resulted in the unauthorized access of personal data like email addresses and telephone numbers of 81 different data subjects. Whether there was a breach of GDPR Art.32. The National Supervisory Authority held that there was a breach of Art.32 and imposed a fine of 9,686.60 lei, the equivalent of 2,000 euros.
Related Enforcement Actions (0)
No other enforcement actions found for Compania Națională Poșta Română in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
15 July 2020
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€1,937
9,687 RON
GDPRhub ID
gdprhub-2594About this data
Cite as: Cookie Fines. Compania Națională Poșta Română - Romania (2020). Retrieved from cookiefines.eu
Last updated: