ANSPDCP (Romania) - Fine against SC Grupex 2000 SRL
| ANSPDCP (Romania) - Fine against SC Grupex 2000 SRL | |
|---|---|
 | |
| Authority: | ANSPDCP (Romania) |
| Jurisdiction: | Romania |
| Relevant Law: | Article 3 GDPR Article 5(1)(a) GDPR Article 5(1)(b) GDPR Article 5(1)(f) GDPR Article 5(1)(c) GDPR Article 5(2) GDPR Article 9 GDPR |
| Type: | Investigation |
| Outcome: | Violation Found |
| Started: | |
| Decided: | 07.01.2022 |
| Published: | 01.02.2022 |
| Fine: | 1000 EUR |
| Parties: | SC Grupex 2000 SRL |
| National Case Number/Name: | Fine against SC Grupex 2000 SRL |
| European Case Law Identifier: | n/a |
| Appeal: | Unknown |
| Original Language(s): | Romanian |
| Original Source: | ANSPDCP (in RO) |
| Initial Contributor: | Diana Rosu |
The Romanian DPA fined a news website approximately €1.000 after it published unlawfully a video recording with hospitalised medical patients, in breach of GDPR Articles 3, 5(1)a, 5(1)b, 5(1)c, 5(1)f, 5(2) and 9.
English Summary
Facts
The Romanian DPA started an investigation against a news website after a regional Social Assistance Agency in Romania complained about them sharing a video footage obtained illegally. The investigation found that the video footage recorded medical patients hospitalised in a medical institute, and publishing it on the news website resulted in sharing the patients' personal data unlawfully.
Holding
The controller (the owner of the news website) was found in breach of GDPR Articles 3, 5(1)a, 5(1)b, 5(1)c, 5(1)f, 5(2) and 9, and therefore fined with approximately €1.000 (RON 4.943,60). At the same time, the controller was also subject to a coercive measure to implement its GDPR compliance using appropriate technical and organisational measures.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details.
01.02.2022 RGPD fine The National Supervisory Authority completed on 07.01.2022 an investigation at the operator of SC Grupex 2000 SRL, on which occasion it was found that the provisions of art. 6 and art. 9 by reference to the principles provided by art. 5 para. (1) lit. a), b), c) and f) and par. (2) of the General Data Protection Regulation. As such, the operator was sanctioned with a fine of 4,943.60 lei (equivalent to 1,000 EURO). The investigation was started as a result of sending notifications from a County Directorate of Social Assistance and Child Protection, having as object the posting of a video material containing images of some patients, published on the website owned by SC Grupex 2000 SRL. During the investigation, it was found that SC Grupex 2000 SRL illegally processed the personal data of some individuals, institutionalized patients, in a video material available on the operator's website, in violation of the provisions of art. 6 and art. 9 by reference to the principles provided by art. 5 para. (1) lit. a), b), c) and f) and par. (2) of the RGPD. At the same time, during the operator's investigation, the corrective measure was applied to ensure the compliance with RGPD of the personal data processing operations, by implementing adequate technical and organizational measures, in compliance with art. 5 and art. 6 of the RGPD. Legal and Communication Department ANSPDCP
