World Trade Center Bucharest SA
€15K($16K USD)final
Date Issued
2019-07-02
Regulation
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Country
Romania
Violation Type
Failure to implement sufficient measures to ensure information security
Currency
EUR
Violation Summary
A printed checklist used to verify the attendance of breakfast customers (approx. 46 clients) was photographed by unauthorized people. As a result, the personal data of those clients was disclosed to the public. The operator working for the hotel was sanctioned because of insufficient security measures.
Articles Violated
Art. 32 GDPR