Tags:Corrective measuresCross-borderData breachData protection by design and by defaultDPADPA investigationGDPR fineIn the spotlight Software company fined EUR 70,000 by the Romanian DPA, acting as the lead supervisory authority, for data security violations
Tags:corective measuresData subject's rightsDPADPA investigationGDPR finemedical sectorRight of accessIn the spotlight The Romanian DPA fines a controller in the medical sector EUR 2,000 for not respecting the right of access
Tags:Banking sectorData breachDPADPA investigationGDPR fineSecurity of processingUpdateIn the spotlight Another controller in the banking sector sanctioned EUR 3,000 by the Romanian DPA for violating GDPR requirements on personal data security
Tags:DPADPA investigationGDPR principlesJudgmentSecurity of processingUpdateIn the spotlight The Romanian DPA’s considerations related to the use of WhatsApp maintained by the Bucharest Tribunal in the first instance
Tags:Binding Corporate RulesComplaintCross-borderData transfersDPAEDPBTemplateIn the spotlight The EDPB template complaint and acknowledgment of receipt forms, and the final version of Recommendations on the application for approval and on the elements and principles to be found in Controller BCRs are now available
Tags:Corrective measuresDPALaw enforcement sectorLegal basisUpdateIn the spotlight Romanian DPA orders ANPC to stop using body cameras during inspections and delete personal data
Tags:Corrective measuresData breachDPADPA investigationGDPR fineMalwarePharmaceutical sectorIn the spotlight The Romanian DPA fines an online pharmacy EUR 2,500 following a data breach
Tags:Code of ConductDecisionDPAUpdateIn the spotlight The Romanian DPA’s final decision approving the accreditation requirements for a code of conduct monitoring body under Article 41 of the GDPR is now in force
Tags:Corrective measuresData subject's rightsDPADPA investigationGDPR fineRight of accesTelecommunications sectorIn the spotlight A telecommunications company sanctioned by the Romanian DPA for failure to ensure the right of access
Tags:ConsentCorrective measuresCross-borderData subject's rightsData transfersDPADPA investigationIn the spotlight The Romanian DPA, acting as the lead supervisory authority, has fined an online retailer a total of EUR 40,000 for GDPR violations