Medstar S.R.L. – €2,000 Fine (Romania, 2025)

€2,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal20 February 2025Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Romanian data protection authority fined Medstar S.R.L. €2,000 for sending a patient's health data to the wrong person via unsecured email. This incident highlights the importance of protecting sensitive information and ensuring that proper security measures are in place. Companies must take data protection seriously to avoid similar penalties.

What happened

Medstar S.R.L. mistakenly sent a patient's health data to another patient through an unsecured email.

Who was affected

Patients whose health data was mishandled by Medstar S.R.L.

What the authority found

The authority found that Medstar S.R.L. failed to implement adequate security measures to protect personal data.

Why this matters

This fine serves as a warning to companies about the importance of data security. It shows that failing to protect personal information can lead to financial penalties and damage to reputation.

GDPR Articles Cited

AI-verified

Art. 32(GDPR)
View original scraped data
Art. 32(GDPR)

Original data from scraper before AI verification against source document.

Source verified 16 March 2026
articles corrected
Full Legal Summary
Detailed

The Romanian DPA imposed a fine of EUR 2,000 on Medstar S.R.L. The controller had mistakenly sent a patient's health data via unsecured email to another patient. The DPA found that the controller had failed to implement appropriate technical and organizational measures to protect personal data and prevent such an incident.

Related Enforcement Actions (0)

No other enforcement actions found for Medstar S.R.L. in RO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

20 February 2025

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€2,000

Enforcement Tracker ID

ETid-2546

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Medstar S.R.L. - Romania (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: