OTP LEASING ROMANIA IFN SA – €3,000 Fine (Romania, 2022)

€3,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal25 November 2022Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

OTP LEASING ROMANIA IFN SA was fined EUR 3,000 after someone accessed their IT platform without permission. This happened because the company didn't have strong enough security measures. Businesses should learn from this to better protect personal data and prevent unauthorized access.

What happened

An individual gained unauthorized access to OTP LEASING ROMANIA IFN SA's IT platform by altering the URL and creating an admin account.

Who was affected

Individuals whose personal data was stored on the IT platform operated by OTP LEASING ROMANIA IFN SA.

What the authority found

The Romanian DPA found that OTP LEASING ROMANIA IFN SA failed to implement adequate technical and organizational measures to secure personal data, violating GDPR requirements.

Why this matters

This case highlights the critical importance of robust security measures to protect personal data. Companies should regularly review and enhance their data protection strategies to prevent breaches.

GDPR Articles Cited

Art. 25(1) GDPR
Art. 32(1)(b) GDPR
Art. 32(2) GDPR
Full Legal Summary
Detailed

The Romanian DPA has imposed a fine of EUR 3,000 on OTP LEASING ROMANIA IFN SA. The controller had reported a data breach to the DPA pursuant to Art. 33 GDPR. An individual had informed the controller that they had gained unauthorized access to an IT platform operated by the controller by changing the URL address and creating an administrator account. This enabled the person to gain unauthorized access to personal data. The DPA found that the controller had failed to take appropriate technical and organizational measures to protect personal data. This resulted in unauthorized access to the personal data.

Related Enforcement Actions (0)

No other enforcement actions found for OTP LEASING ROMANIA IFN SA in RO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

25 November 2022

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€3,000

Enforcement Tracker ID

ETid-1503

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. OTP LEASING ROMANIA IFN SA - Romania (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: