Partidul Uniunea Salvați România – €4,000 Fine (Romania, 2023)

€4,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal15 March 2023Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Romania fined the political party Partidul Uniunea Salvați România EUR 4,000 after a phishing attack exposed personal data. The party didn't use strong security measures like data encryption to protect this information. This case highlights the importance of securing personal data to prevent unauthorized access.

What happened

Partidul Uniunea Salvați România suffered a phishing attack that exposed personal data without proper security measures like encryption.

Who was affected

People whose personal data, including political affiliation, was accessed during the phishing attack.

What the authority found

The Romanian authority found that the party failed to implement adequate security measures, violating GDPR's requirements for data protection.

Why this matters

This fine emphasizes the need for organizations to use strong security practices, such as encryption, to protect personal data. It serves as a reminder for political parties and other organizations to review their data security measures.

GDPR Articles Cited

Art. 32(1)(a) GDPR
Art. 32(2) GDPR
Full Legal Summary
Detailed

The Romanian DPA has fined the Partidul Uniunea Salvați România party EUR 4,000. The controller had suffered a phishing attack in which the attackers gained unauthorized access to personal data such as first name, last name, email, phone number, as well as data on the political affiliation of the data subjects. The DPA found that the controller had failed to implement adequate technical and organizational measures such as data encryption to protect personal data, which facilitated such an attack.

Details

Fine Date

15 March 2023

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€4,000

Enforcement Tracker ID

ETid-1684

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Partidul Uniunea Salvați România - Romania (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: