- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Kaufland Romania SCS – €2,000 Fine (Romania, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Kaufland Romania was fined EUR 2,000 for failing to protect customer data after two data breaches. This is significant because it shows that companies must take strong measures to secure personal information. Retailers need to have proper procedures to prevent unauthorized access to customer data.
What happened
The Romanian DPA fined Kaufland Romania for not adequately securing customer data after two breaches.
Who was affected
Customers whose personal data was exposed due to the breaches.
What the authority found
The DPA found that Kaufland did not implement appropriate security measures to protect personal data.
Why this matters
This ruling stresses the need for businesses to enhance their data security practices. Companies must ensure they have robust measures in place to protect customer information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Romanian DPA has imposed a fine of EUR 2,000 on Kaufland România SCS. The controller had reported two data breaches to the DPA pursuant to Art. 33 GDPR. An employee who processed a complaint had not followed the internal procedure for handling complaints, allowing a security guard to view and misuse the complainant's data. In addition, the controller had mistakenly forwarded the data in a customer order form to an unauthorized third party. This led to the disclosure of personal data (first name, last name, e-mail address, telephone number) of the affected Kaufland customer. For this reason, the DPA found that the controller had not taken appropriate technical and organizational measures to ensure the protection and security of personal data.
Related Enforcement Actions (0)
No other enforcement actions found for Kaufland Romania SCS in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
3 June 2022
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€2,000
About this data
Cite as: Cookie Fines. Kaufland Romania SCS - Romania (2022). Retrieved from cookiefines.eu
Last updated: