On 30 July 2021, the Romanian DPA announced two fines of EUR 100 each were imposed against a private individual (qualified as controller) with regard to the disclosure of personal data included in a picture of a data subject’s payslip, as well as in a picture of the Register of children enrolled in the Regular Program Kindergarten containing personal data of another data subject’s child, by distributing certain materials within the village, as well as posting them on Facebook.
One fine was imposed for noncompliance with the lawfulness, fairness and transparency, purpose limitation, and accountability principles and for not being able to prove the lawfulness of processing the personal data included in the picture of the payslip. The other fine was imposed for not being able to prove the provision of information to the data subject with respect to the personal data included in the picture of the above-mentioned Register.
The press release is available here (only in Romanian).
