The National Supervisory Authority finalized in November 2022 an investigation at the controller Societatea Energetică Electrica S.A. and found the breach of Article 28 paragraph (3) letter a) of Regulation (EU) 2016/679.

The controller was sanctioned with fine in amount of Lei 24,654.50, the equivalent of EUR 5,000.

The investigation was started following the submission by the controller Societatea Energetică Electrica S.A. of a notification regarding a breach of the personal data confidentiality, by reference to the provisions of the General Data Protection Regulation.

In addition to the fine, the controller was recommended to take all necessary measures to ensure the observance of the provisions of Article 46-49 of the GDPR.

Legal and Communication Department

A.N.S.P.D.C.P.