Cooperation Helps To Avoid Fines

In a case of non-cooperation, the Romanian data protection authority ANSPDCP imposed a fine of 2,000 euros on a dental clinic. The case began when the clinic itself reported a data breach to the authority. A former employee had copied the contact information and medical records of all patients. She then contacted these patients to approach them for a new clinic. The authority subsequently launched an investigation and repeatedly requested information from the clinic. However, the company did not respond to these requests, or did so only partially. As a first step, the authority issued an official warning and a formal order requiring the clinic to grant the authority the requested access to the data and information. Since the dental clinic still failed to comply with this order within the set deadline, the fine was imposed as a second step.

Authority: ANSPDCP (Romania)
Industry: Healthcare
Violation: Art. 58(1)(a), (e) GDPR, Art. 83(5)(e) GDPR
Fine: 10,190 lei (2,000 euros)

The fine was imposed solely due to a lack of cooperation. The key point here is the escalation: The penalty was only imposed after the company had ignored not only the initial requests but also a subsequent formal order and warning. Companies must implement clear incident response processes, including dedicated contact persons and training, to avoid fines and maintain trust.

Should you have any questions on cookies or require further information, please do not hesitate to contact us any time.