Vodafone România SA – €3,000 Fine (Romania, 2020)

€3,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal11 February 2020Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Vodafone Romania was fined €3,000 for sending personal data to the wrong email address while handling a complaint. This is important because it shows that companies must take care to protect personal information. Small businesses should implement strong security measures to prevent similar mistakes.

What happened

Vodafone Romania was fined for transmitting personal data to an inaccurate email address.

Who was affected

A customer whose complaint was mishandled was affected.

What the authority found

The authority found that Vodafone Romania violated GDPR principles by not ensuring the accuracy and security of personal data.

Why this matters

This ruling serves as a reminder for companies to adopt effective security measures to protect personal data and avoid penalties.

GDPR Articles Cited

Art. 5(1)(d) GDPR
Art. 5(1)(f) GDPR
Art. 5(2) GDPR
Art. 58(2)(d) GDPR
Full Legal Summary
Detailed

The ANSPDCP carried out investigation against the Romanian telecommunication operator Vodafone România SA. The company transmitted personal data to inaccurate e-mail address while handling a data subject's complaint. Did the controller processed personal data in line with the GDPR principles? The ANSPDCP found that the company processed personal data without having implemented sufficient security measures. Thus it violated the principles of accuracy, integrity and confidentiality as laid down in Article 5(1)(d) and (f) GDPR read in conjunction with the principle of accountability according to Article 5(2) GDPR. The ANSPDCP imposed a fine of 14308.8 lei (equivalent to EUR. 3.000) and pursuant to Article 58(2)(d) GDPR it ordered the complany to put in place efficient technical and organisational measures within 30 days.

Details

Fine Date

11 February 2020

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€3,000

Enforcement Tracker ID

ETid-2455

GDPRhub ID

gdprhub-2209

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Vodafone România SA - Romania (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: