SC Cntar Tarom SA – €4,837 Fine (Romania, 2020)

€4,837Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal6 July 2020Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Romania's data protection authority fined Tarom for not having strong enough security measures to protect passenger data. This led to unauthorized access to five passengers' personal information. The case shows the importance of having robust security systems to protect customer data.

What happened

Tarom was fined for failing to implement adequate security measures, leading to unauthorized access to passenger data.

Who was affected

Five passengers of Tarom had their personal data accessed without authorization.

What the authority found

The authority found that Tarom violated GDPR by not having proper security measures to protect personal data.

Why this matters

This case highlights the need for companies to have strong security measures to protect personal data. Businesses should regularly assess and update their security practices to avoid similar fines.

GDPR Articles Cited

Art. 32 GDPR
Full Legal Summary
Detailed

The National Supervisory Authority conducted an investigation into Tarom's security measures and found that Tarom had not implemented adequate technical and organizational measures to protect the personal data of its passengers. This led to the unauthorized access and disclosure of data belonging to five of Tarom's passengers. Whether there had been a violation of GDPR Art.32 (security of processing). Tarom was fined 24,182.50 lei (approx. 5,000 Euros). Tarom was required to take corrective measures, such as undertaking risk assessment procedures, reviewing and updating their security, and training its employees.

Details

Fine Date

6 July 2020

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€4,837

24,183 RON

GDPRhub ID

gdprhub-2593

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. SC Cntar Tarom SA - Romania (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: