ANSPDCP (Romania) - Association SOS Infertility

ANSPDCP - Association SOS Infertility
Authority:	ANSPDCP (Romania)
Jurisdiction:	Romania
Relevant Law:	Article 58(1)(a) GDPR Article 58(1)(e) GDPR Article 83(5)(e) GDPR
Type:	Investigation
Outcome:	Violation Found
Started:
Decided:	13.02.2020
Published:	26.03.2020
Fine:	2.000 EUR
Parties:	Association SOS Infertility
National Case Number/Name:	Association SOS Infertility
European Case Law Identifier:	n/a
Appeal:	Unknown
Original Language(s):	Romanian
Original Source:	ANSPDCP (in RO)
Initial Contributor:	n/a

The ANSPDCP fined association EUR. 2,000 because it did not respond to its order to provide information and to allow access to personal data as required by Article 58(1)(a) and (e).

English Summary

Facts

The ANSPDCP was notified that the the Association SOS Infertility processed personal data without consent and it initiated investigation. It ordered the Association to to provide information and allow access to personal data according to Article 58(1)(a) and (e) GDPR. The controller did not comply.

Holding

Since the data controller did not respond to the ANSPDCP's orders, the latter decided to impose a fine of 9529.2 lei (approx. EUR. 2,000) and to order the controller to provide all requested information within 5 days.

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details.

On 13.02.2020, the National Supervisory Authority completed an investigation with the operator of the "SOS Infertility" Association and found that it did not transmit the information requested by the Supervisory Authority pursuant to art. 58 paragraph (1) lit. a) and letter e) of the General Regulation on Data Protection.

The operator was sanctioned contravening with a fine in the amount of 9529.2 lei, equivalent to the amount of 2000 EURO, pursuant to art. 83 paragraph (5) lit. e) of Regulation (EU) 679/2016.

The National Supervisory Authority was notified that the "SOS Infertility" Association has disclosed personal data without the consent of the data subject.

The supervisory authority asked the Association for more information regarding the aspects notified, but the operator did not respond to the requests of our institution. Following the telephone contact of the operator, the president of the association expressed his option to send the request of the Supervisory Authority by e-mail to an address indicated by him.

As the Association "SOS Infertility" did not send the requested information until the conclusion of the report of finding / sanctioning, it was sanctioned with a fine.

At the same time, the corrective measure was applied to the operator to transmit to the Authority, in writing, all the requested information, within 5 working days from the communication of the minutes.