Details:

Summary The Romanian DPA has imposed a fine of EUR 1,000 on SC Interactions Marketing SRL. The controller had sent advertising messages by e-mail to several people on behalf of another company. One of the recipients had filed a complaint with the DPA due to the fact that the controller had sent the advertising messages in an open distribution list, making the email addresses of all recipients visible to the other recipients.
Link: link
Related articles:  Art. 32 (1) b) GDPR
Type: Insufficient technical and organisational measures to ensure information security
Fine: EUR 1,000
Sector Industry and Commerce

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law