Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Romania: ANSPDCP fines CDI Transport Intern si Internazionale €7,000 for failure to provide information requested by the ANSPDCP

The National Supervisory Authority for Personal Data Processing ('ANSPDCP') published, on 9 August 2022, its decision, in which it imposed a fine of €7,000 to CDI Transport Intern și Internațional SRL, for violation of Articles 58(1)(a) and 58(1)(e) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'), as well as a warning, for violations of Article 12(1) of the GDPR, following an investigation launched in response to reports from individuals.

Background to the decision

In particular, the ANSPDCP noted that the investigation was initiated following reports that CDI Transport Intern și Internațional's website provided no information on, inter alia, the method of collecting personal data, data subjects' rights pursuant to Articles 15-22 of the GDPR, and CDI Transport Intern și Internațional's obligation to inform data subjects in the event of a breach of personal data security.

Findings of the ANSPDCP

As a result of the investigation carried out, the ANSPDCP found that CDI Transport Intern și Internațional had not provided data subjects with the information required under Article 12(1) of the GDPR. Additionally, the ANSPDCP outlined that CDI Transport Intern și Internațional had not provided the ANSPDCP with all the information that the latter had previously requested to the company, resulting in the violation of the Articles 58(1)(a) and 58(1)(e) of the GDPR.

Outcomes

In light of the above, the ANSPDCP imposed a fine of €7,000 on CDI Transport Intern și Internațional for infringing Articles 58(1)(a) and 58(1)(e) of the GDPR and a warning for infringing Article 12(1) of the GDPR. Moreover, the ANSPDCP ordered CDI Transport Intern și Internațional to ensure that all the necessary information be communicated in a concise, transparent, intelligible, and easily accessible form to the data subjects, pursuant to Article 12 of the GDPR.

You can read the decision, only available in Romanian, here.