startupcafe.ro/amenda-gdpr-pentru-o-firma-din-roma

The National Supervisory Authority for Personal Data Processing (ANSPDCP) fined ASAM SA for multiple GDPR violations, totaling €5,000. The investigation revealed that the company failed to adequately respond to a data access request and lacked proper internal measures for data rights facilitation. Additionally, ASAM SA's extensive video surveillance system infringed on employee privacy rights, with cameras placed in sensitive areas. The authority noted excessive data retention periods and the absence of a necessary data protection impact assessment. Alongside fines, corrective measures were mandated to ensure compliance with GDPR regulations.