UTTIS INDUSTRIES
€3K($3K USD)final
Date Issued
2019-10-17
Regulation
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Country
Romania
Violation Type
Information obligation non-compliance
Currency
EUR
Violation Summary
A controller was sanctioned because he had unlawfully processed the personal data (CNP), and images of employees obtained through the surveillance system. The disclosure of the CNP in a report for the ISCIR training in 2018 wasn’t legal, as per Art.6 GDPR.
Articles Violated
Art. 12 GDPRArt. 13 GDPRArt. 5 (1) c) GDPRArt. 6 GDPR