Another sanction for the infringement of GDPR
On the 15th of September 2020, the National Supervisory Authority finalised an investigation at the controller Globus Score SRL and found that it did not fulfilled the corrective measure ordered to provide the information requested by the Supervisory Authority, thus violating the instructions of our institution, a fact provided in Article 83 paragraph (5) letter e), in connection with Article 58 paragraph (1) of the General Data Protection Regulation.
As such, the controller Globus Score SRL was sanctioned with a fine of 9,713.14 lei, the equivalent of 2000 euros.
At the same time, a corrective measure to transmit to the supervisory authority all the requested information was applied to the controller.
In this context, we mention that Article 83 paragraph (5) letter e) of the General Data Protection Regulation provides the following:
“5. Infringements of the following provisions shall, in accordance with paragraph 2, be subject to administrative fines up to 20 000 000 EUR, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding financial year, whichever is higher:
e) non-compliance with an order or a temporary or definitive limitation on processing or the suspension of data flows by the supervisory authority pursuant to Article 58(2) or failure to provide access in violation of Article 58(1).”
A.N.S.P.D.C.P