Lately, the Romanian DPA announced two new sanctions for violation of GDPR article 58.
A natural person has been under the DPA’s scrutiny for improperly installing a video surveillance system on a building. The DPA has requested information from the controller in order to assess the legality of the processing activity occurred, however it was given the silent treatment. Firstly, the DPA has applied a reprimand altogether with a corrective measure consisting of providing the requested information. Given that it did not receive a reply the second time either, the authority has sanctioned the natural person with a fine of EUR 200.
It is important to note that for the improper installation of the video surveillance system, the investigation is still underway, and the outcome is uncertain.
The press release is available here, only in Romanian.
In another case, a controller operating in the food service industry was the subject of a data-subject complaint revealing that it has displayed a national identity card on its premises.
In a similar manner to the first case, the controller has failed to comply with the request for information ordered by the DPA. Therefore, the authority has applied a fine of EUR 1000 for unlawful processing of data, as well as a reprimand for not responding to the requests for information.
The press release is available here, only in Romanian.
