ANSPDCP (Romania) - Fine against SC Grupex 2000 SRL
| ANSPDCP (Romania) - Fine against SC Grupex 2000 SRL | |
|---|---|
 | |
| Authority: | ANSPDCP (Romania) |
| Jurisdiction: | Romania |
| Relevant Law: | Article 6 GDPR Article 5(1)(a) GDPR Article 5(1)(b) GDPR Article 5(1)(f) GDPR Article 5(1)(c) GDPR Article 5(2) GDPR Article 9 GDPR |
| Type: | Investigation |
| Outcome: | Violation Found |
| Started: | |
| Decided: | 07.01.2022 |
| Published: | 01.02.2022 |
| Fine: | 1000 EUR |
| Parties: | SC Grupex 2000 SRL |
| National Case Number/Name: | Fine against SC Grupex 2000 SRL |
| European Case Law Identifier: | n/a |
| Appeal: | Unknown |
| Original Language(s): | Romanian |
| Original Source: | ANSPDCP (in RO) |
| Initial Contributor: | Diana Rosu |
The Romanian DPA fined a news website approximately €1000 after it published video recordings of medical patients in breach of Articles 6 and 9 GDPR.
English Summary
Facts
The Romanian DPA started an investigation against the news website SC Grupex 2000 SRL after a regional Social Assistance and Child Protection Agency notified the DPA that video recordings of some of their hospitalised patients were published on its website.
Holding
The Romanian DPA held that the publishing of these recordings constituted an unlawful processing of personal data in breach of Articles 6 and 9 GDPR, with reference to the principles in Article 5(1)(a), (b), (c), (f) and 5(2) GDPR. Based on these considerations, the DPA issued a fine of approximately €1000 (RON 4943.60) against the website.
Additionally, the Romanian DPA also ordered the website to implement appropriate technical and organisational measures to ensure compliance with GDPR.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details.
01.02.2022 RGPD fine The National Supervisory Authority completed on 07.01.2022 an investigation at the operator of SC Grupex 2000 SRL, on which occasion it was found that the provisions of art. 6 and art. 9 by reference to the principles provided by art. 5 para. (1) lit. a), b), c) and f) and par. (2) of the General Data Protection Regulation. As such, the operator was sanctioned with a fine of 4,943.60 lei (equivalent to 1,000 EURO). The investigation was started as a result of sending notifications from a County Directorate of Social Assistance and Child Protection, having as object the posting of a video material containing images of some patients, published on the website owned by SC Grupex 2000 SRL. During the investigation, it was found that SC Grupex 2000 SRL illegally processed the personal data of some individuals, institutionalized patients, in a video material available on the operator's website, in violation of the provisions of art. 6 and art. 9 by reference to the principles provided by art. 5 para. (1) lit. a), b), c) and f) and par. (2) of the RGPD. At the same time, during the operator's investigation, the corrective measure was applied to ensure the compliance with RGPD of the personal data processing operations, by implementing adequate technical and organizational measures, in compliance with art. 5 and art. 6 of the RGPD. Legal and Communication Department ANSPDCP
