Hora Credit IFN SA – 14.000 Euro Fine
The Romanian data protection authority has accused Hora Credit IFN SA of sending personal data to the wrong recipient. The company had violated the principles of the GDPR (according to Paragraph 5 of GDPR), which regulate the processing of personal data. Beside the company had not implemented suitable technical and organizational measures (TOM) to prevent unauthorized disclosure of data. The data protection violation was also not reported within 72 hours, as written down in Paragraph 33. The company also breached Paragraph 6 and Paragraph 9 of the GDPR.
The authority imposed three fines of approximately 3,000 euros, 10,000 euros and 1,000 euros, for a total of approximately 14,000 euros.
Entscheidungsdatum:
10.12.2019
Land:
Romania
Art des Verstoßes:
violated rights of the data subject
Betroffene Datensätze:
unknown
Waren sensible Daten betroffen?:
No
verhängte Geldstrafe:
€ 14,000,-