NN Pensii Societate de Administrare a unui Fond de Pensii Administrat Privat S.A. – €1,500 Fine (Romania, 2023)

€1,500Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal12 May 2023Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Romania fined NN Pensii EUR 1,500 for not protecting personal data properly. A technical change let some website visitors see others' personal info like names and ID numbers. This case highlights the importance of securing personal data to prevent unauthorized access.

What happened

NN Pensii made a technical change that allowed unauthorized access to personal data of some individuals.

Who was affected

The personal data of two individuals was exposed to unauthorized website visitors.

What the authority found

The Romanian DPA found that NN Pensii failed to implement adequate technical and organizational measures to protect personal data.

Why this matters

This fine underscores the need for companies to ensure their systems are secure to prevent data breaches. Businesses should regularly review and update their security measures to protect customer information.

GDPR Articles Cited

Art. 32(1)(b) GDPR
Art. 32(2) GDPR
Full Legal Summary
Detailed

The Romanian DPA has imposed a fine of EUR 1,500 on the insurance company NN Pensii Societate de Administrare a unui Fond de Pensii Administrat Privat S.A.. The controller had notified the authority of a data breach pursuant to Art. 33 GDPR. The controller had made a number of technical changes to its systems that allowed some website visitors to access personal data of other individuals. This led to the unauthorized access of personal data such as name, ID card number, email, etc. of two individuals. During its investigation, the DPA found that the controller had failed to take appropriate technical and organizational measures to protect personal data, which facilitated such an incident.

Related Enforcement Actions (0)

No other enforcement actions found for NN Pensii Societate de Administrare a unui Fond de Pensii Administrat Privat S.A. in RO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

12 May 2023

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€1,500

Enforcement Tracker ID

ETid-1846

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. NN Pensii Societate de Administrare a unui Fond de Pensii Administrat Privat S.A. - Romania (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: