The National Supervisory Authority finalized in November current year an investigation at an Owners’ Association from Iasi to which it applied a fine and a reprimand, as it follows:

fine in amount of Lei 2,462.5, the equivalent of EUR 500, for the infringement of the provisions of Article 83 paragraph (5) letter e) of the GDPR;
reprimand for the breach of the provisions of Article 6 in conjunction with Article 83 paragraph (5) letter a) of the GDPR.

The investigation was carried out following a complaint through which it was claimed that the controller posted the payment lists containing the first name and last name of each member of the Owners’ Association. Also, the claimant claimed that a document with defamatory content within which his personal data were mentioned (first name and last name) was posted.

Within the investigation it was found that the Owners’ Association disclosed the personal data of the claimant (first name and last name) by posting at the notice board an information, without his consent and without the existence of another situation for which the consent is not necessary.

Also, the corrective measure to take the necessary measures in order to ensure the compliance of the processing operations with the GDPR provisions and to avoid the processing (including disclosure) of the personal data without the consent of the data subjects and without the existence of another situation for which the consent is not necessary was applied to the controller.

Legal and Communication Department

A.N.S.P.D.C.P