Romanian wanted to expose “scammers” but got a €10,000 GDPR fine instead
Romanian authorities have fined an individual for multiple violations of the European privacy rules after the person shared sensitive personal information about people they claimed were “scammers.”
Image by Pocketlight via Getty Images
Romanian authorities have fined an individual for multiple violations of the European privacy rules after the person shared sensitive personal information about people they claimed were “scammers.”
Romania’s National Supervisory Authority for the Processing of Personal Data fined an individual who operated a website where they shared identity cards and other sensitive information without consent, Tech Rider reports.
The website evita-teparri.ro published names, photos, phone numbers, emails, alleged criminal records, and information about individuals’ sexual lives.
The authorities concluded that the person violated the General Data Protection Regulation (GDPR) by publishing sensitive data without legal grounds, failing to disclose the website’s operator, ignoring data deletion requests, and failing to respond to investigators.
The offender will have to pay 50.890 leis, equivalent to €10,000 and $11,790, across four separate fines.
“This operator thought they were protecting consumers. Instead, they stacked GDPR violations,” a lawyer Ana-Maria Drăgănuță Briard wrote on LinkedIn.
GDPR is a comprehensive European regulation aimed at protecting the privacy and security of personal data.
Unlock more exclusive Cybernews content on YouTube.