The Romanian Supervisory Authority Fines Enel Energie Muntenia S.A.

The Romanian Supervisory Authority has fined Enel Energie Muntenia S.A. for a data breach.

According to the information published on the EDPB website:

The investigation was launched in response to some complaints made by a natural person who claimed that, following a phone inquiry to Enel Energie Muntenia S.A., he or she had received a response addressed to a different client, a natural person, along with some documents.

Within the investigation performed, it was found that the controller Enel Energie Muntenia SA did not present clear information regarding the reasons for which one of its employees sent by error the response of the claimant.

The controller did not present proof regarding the notification of this incident to the Romanian Supervisory Authority (SA).

Following the investigation, the controller Enel Energie Muntenia S.A. was sanctioned with a fine in the amount of lei 49,337 (the equivalent of EUR 10,000) for the breach of the provisions of Article 32 of the GDPR and reprimand for the breach of the provisions of Article 33.

Also, based on Article 58 paragraph (2) letter d) of the GDPR, 3 corrective measures were imposed against the controller Enel Energie Muntenia S.A.

You can reach the full text of the press release here.

Kind regards,

Zumbul Attorneys at Law

info@zumbul.av.tr