Kaufland Romania SCS – €2,000 Fine (Romania, 2022)

€2,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal3 June 2022Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Kaufland Romania was fined EUR 2,000 for mishandling customer data. An employee's mistake led to personal data being shared with unauthorized people. This shows how critical it is for companies to have strong data protection measures and follow procedures to prevent data breaches.

What happened

Kaufland Romania mishandled customer data, leading to unauthorized access and sharing of personal information.

Who was affected

Kaufland customers whose personal data was improperly accessed and shared.

What the authority found

The Romanian DPA found Kaufland Romania failed to implement adequate security measures to protect personal data.

Why this matters

This case underscores the need for businesses to have robust data protection practices and ensure employees follow them. It serves as a reminder that even small mistakes can lead to significant privacy breaches.

GDPR Articles Cited

Art. 29(GDPR)
Art. 32(1)(b) GDPR
Art. 32(2) GDPR
Full Legal Summary
Detailed

The Romanian DPA has imposed a fine of EUR 2,000 on Kaufland România SCS. The controller had reported two data breaches to the DPA pursuant to Art. 33 GDPR. An employee who processed a complaint had not followed the internal procedure for handling complaints, allowing a security guard to view and misuse the complainant's data. In addition, the controller had mistakenly forwarded the data in a customer order form to an unauthorized third party. This led to the disclosure of personal data (first name, last name, e-mail address, telephone number) of the affected Kaufland customer. For this reason, the DPA found that the controller had not taken appropriate technical and organizational measures to ensure the protection and security of personal data.

Details

Fine Date

3 June 2022

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€2,000

Enforcement Tracker ID

ETid-1198

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Kaufland Romania SCS - Romania (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: