ANSPDCP (Romania) - AMATO BESTSELLER S.R.L.
Romania's ANSPDCP fines AMATO BESTSELLER S.R.L. for GDPR and ePrivacy violations.
The Romanian data protection authority (ANSPDCP) has fined AMATO BESTSELLER S.R.L. a total of 285,395 RON (approximately €54,300) for multiple violations of GDPR and the ePrivacy Directive. The company failed to implement adequate security measures, allowing unauthorized access to sensitive personal data by current and former employees. Additionally, they engaged in excessive data processing, failed to provide accurate information to data subjects, and sent commercial communications without prior consent.
AI summary of the linked source. Not reviewed by an editor. How this works
Run AMATO BESTSELLER S.R.L.?
Get an email when a new story names AMATO BESTSELLER S.R.L., usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAMATO BESTSELLER S.R.L. failed to implement adequate technical and organizational security measures, allowing both current and former employees unauthorized access to sensitive personal data — a fundamental access control failure. Beyond the access breach, the company compounded its liability by processing data excessively beyond stated purposes, providing inaccurate information to data subjects, and sending marketing communications without valid consent. This case illustrates how multiple simultaneous GDPR violations significantly amplify regulatory penalties. It serves as a critical reminder that GDPR compliance is not a one-time checkbox but requires ongoing governance across access management, data minimization, transparency, and consent frameworks.
What helps against this
How we list vendors- Identity governance and single sign-on
People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.