Details:

Summary The Romanian DPA has imposed a fine of EUR 3,000 on Veranda Obor S.A.. The controller had disclosed personal data (e.g. name, e-mail adress etc.) of lottery participants on its website.
Link: link
Related articles:  Art. 32 (1) b) GDPR, Art. 32 (2) GDPR
Type: Insufficient technical and organisational measures to ensure information security
Fine: EUR 3,000
Sector Industry and Commerce

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law