S CNTAR TAROM SA (Airline) – €20,000 Fine (Romania, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Romania fined the airline TAROM EUR 20,000 for not protecting customer data properly. An employee accessed and shared passenger details online without permission. This highlights the importance of securing personal data and supervising employees handling it.
What happened
An employee at TAROM accessed and leaked passenger data online without authorization.
Who was affected
22 passengers whose personal data was exposed by an unauthorized TAROM employee.
What the authority found
The Romanian authority fined TAROM for failing to ensure proper data protection measures and employee supervision under GDPR.
Why this matters
This case shows that companies must secure personal data and supervise employees to prevent unauthorized access. It emphasizes the need for strong data protection practices to avoid fines.
GDPR Articles Cited
The Romanian data protection authority imposed a sanction on an airline because it has not taken appropriate measures to ensure that any natural person acting under its supervision processes personal data in accordance with its instructions (Article 32(4) of the GDPR). This resulted in an employee having unauthorized access to the booking application and being able to photograph a list with the personal data of 22 passengers/customers to disclose this list on the Internet.
Related Enforcement Actions (0)
No other enforcement actions found for S CNTAR TAROM SA (Airline) in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
4 December 2019
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€20,000
Enforcement Tracker ID
ETid-125
About this data
Cite as: Cookie Fines. S CNTAR TAROM SA (Airline) - Romania (2019). Retrieved from cookiefines.eu
Last updated: