ANSPDCP (Romania) - AMATO BESTSELLER S.R.L.
Romania's ANSPDCP fines company €54,300 for GDPR and ePrivacy violations.
Romania's data protection authority (ANSPDCP) has fined AMATO BESTSELLER S.R.L. €54,300 for multiple GDPR and ePrivacy Directive violations. The company failed to implement adequate security measures, allowing former employees access to sensitive personal data. Additionally, they engaged in excessive data processing, provided incomplete information to data subjects, and used automated dialing systems for commercial communications without prior consent.
AI summary of the linked source. Not reviewed by an editor. How this works
Run ANSPDCP?
Get an email when a new story names ANSPDCP, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAMATO BESTSELLER S.R.L. failed on multiple fronts: former employees retained active access to personal data after leaving the organization, indicating a broken or absent offboarding process for revoking credentials and permissions. The company also processed data beyond its stated purpose, failed to properly inform data subjects of their rights, and conducted automated marketing calls without obtaining prior consent — all clear GDPR and ePrivacy violations. These failures demonstrate a systemic lack of data governance, not just isolated technical oversights. The resulting €54,300 fine highlights that regulators treat access control lapses and consent failures as serious, financially punishable risks rather than administrative technicalities.
What helps against this
How we list vendors- Identity governance and single sign-on
People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.