- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
SC Cntar Tarom SA – €4,837 Fine (Romania, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
SC Cntar Tarom SA failed to protect its passengers' personal data, leading to unauthorized access and disclosure of information. This matters because it shows the importance of having strong security measures in place to protect customer data.
What happened
Tarom did not implement adequate security measures to protect the personal data of its passengers.
Who was affected
Passengers of Tarom whose personal data was accessed without authorization.
What the authority found
The National Supervisory Authority found that Tarom violated GDPR's security requirements by not having proper protections in place.
Why this matters
This case highlights the need for companies to prioritize data security to avoid breaches. It serves as a reminder for all businesses to regularly assess and improve their data protection measures.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 15 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The National Supervisory Authority conducted an investigation into Tarom's security measures and found that Tarom had not implemented adequate technical and organizational measures to protect the personal data of its passengers. This led to the unauthorized access and disclosure of data belonging to five of Tarom's passengers. Whether there had been a violation of GDPR Art.32 (security of processing). Tarom was fined 24,182.50 lei (approx. 5,000 Euros). Tarom was required to take corrective measures, such as undertaking risk assessment procedures, reviewing and updating their security, and training its employees.
Related Enforcement Actions (1)
Other enforcement actions involving SC Cntar Tarom SA in RO
Details
Fine Date
6 July 2020
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€4,837
24,183 RON
About this data
Cite as: Cookie Fines. SC Cntar Tarom SA - Romania (2020). Retrieved from cookiefines.eu
Last updated: