Fine for the infringement of GDPR
The National Supervisory Authority finalized on 06.05.2021 an investigation at an Owners’ Association from Iasi to which it imposed a fine, following the fact that this controller did not provide the information requested by our institution, thus breaching the provisions of Article 83 paragraph 5 letter e) corroborated with the provisions of Article 58 paragraph 1 letters a) and e) of the General Data Protection Regulation.
Therefore, the Owners’ Associations was sanctioned with a fine in amount of Lei 2,463.3, the equivalent of the amount of Eur 500, based on Article 58 paragraph 2 letter i) of the General Data Protection Regulation, corroborated with Article 8 of G.O. no. 2/2001.
The investigation was performed following a complaint through which is was claimed that the controller posted the payment lists by detailing the first name and last name of each member of the Owners’ Association. Also, the claimant complained about the posting of a document with defamatory content within which his/her personal data were mentioned (first name and last name).
Given that the controller did not respond to the requests of our institution, although it has confirmed their receipt, it was sanctioned with fine.
Also, the Owners’ Association was ordered to provide to the supervisory authority all the requested information, within 5 working days from the communication of the minutes.
Legal and Communication Department