The National Supervisory Authority for Personal Data Processing finalized in July 2023 an investigation at the controller territorial and administrative unit Albeni Village and found the breach of the provisions:

Article 58 paragraph (1) letters a) and e) from Regulation (EU) 2016/679 and of Article 14 paragraph (5) letter e) of Law no. 190/2018;
Articles 13, 14 and Article 32 from Regulation (EU) 2016/679.

The controller was sanctioned with fine in amount of Lei 10,000 for the fact that it did not fulfill the measures previously ordered by the Authority through a remedy plan and did not respond to the requests of the Authority and with a reprimand for the lack of information of the data subjects in relation to their rights provided under Regulation (EU) 2016/679, as well as for not taking adequate security and confidentiality measures for the protection of the personal data processed through the video surveillance system.

Within the investigation performed following a complaint regarding a possible breach of the legal provisions on the processing of the data by Albeni Village territorial and administrative unit through some video surveillance cameras through which it was found that the controller sanctioned did not fulfil the measures previously ordered by the National Supervisory Authority through a remedy plan and did not respond to the requests of the Authority.

Within the same investigation it was also found that the controller did not prove the information of the data subjects in relation to the rights provided under Regulation (EU) 2016/679, as well as the adoption at the level of the Albeni Village administrative and territorial unit of some adequate security and confidentiality measures for the protection of the personal data processed through the video surveillance system owned, with the breach of the provisions of Article 13 and Article 14 from GDPR, as well as of the obligations imposed under Article 32 from Regulation (EU) 2016/679.

Also, the National Supervisory Authority for Personal Data Processing also applied corrective measures, ordering to the controller:

To handle all the requests of the Authority, as it was ordered through the remedy plan;
To implement adequate security and confidentiality measures in relation to the protection of the personal data processed through the video surveillance system by Albeni territorial and administrative unit, to provide to the National Supervisory Authority, in copy, the procedure/procedures adopted and the proofs regarding the performance of the training of the persons that have access to the images taken through the video surveillance system, as well as to take the necessary measures in order for the data subjects to be informed in relation to the rights provided under Regulation (EU) 2016/679 in accordance with the provisions of Article 13 and Article 14 from GDPR.

Legal and Communication Department

A.N.S.P.D.C.P.