RESTART ENERGY ONE S.A. – €25,000 Fine (Romania, 2023)

€25,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal26 September 2023Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

RESTART ENERGY ONE S.A. in Romania was fined €25,000 for failing to protect personal data on its website. The company had a file publicly accessible that contained sensitive information of over 750 individuals for about 2.5 years. This case highlights the importance of keeping personal data secure and private.

What happened

The company had a publicly accessible file containing personal data of at least 750 individuals.

Who was affected

Individuals whose personal data was exposed online were affected.

What the authority found

The Romanian DPA found that RESTART ENERGY ONE S.A. did not implement adequate measures to protect personal data, violating GDPR requirements.

Why this matters

This ruling serves as a strong reminder for companies to ensure their data protection practices are robust. It reflects a growing trend of accountability for businesses regarding data security.

GDPR Articles Cited

Art. 32(1)(b) GDPR
Art. 32(2) GDPR
Full Legal Summary
Detailed

The Romanian DPA has imposed a fine of EUR 25,000 on RESTART ENERGY ONE S.A.. During its investigation, the DPA found that there existed a publicly accessible file on the controller's website containing personal data (name, surname, address, telephone numbers, email addresses, contract number and contract date) of at least 750 data subjects. The file was publicly accessible via a link generated by search engines for a period of approximately 2.5 years. The DPA concluded that the controller had failed to implement appropriate technical and organizational measures to protect personal data.

Related Enforcement Actions (0)

No other enforcement actions found for RESTART ENERGY ONE S.A. in RO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

26 September 2023

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€25,000

Enforcement Tracker ID

ETid-2045

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. RESTART ENERGY ONE S.A. - Romania (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: