The National Supervisory Authority finalized in August, current year an investigation at the controller Realmedia Network SA (imobiliare.ro) within which it found the breach of the provisions of Article 32 paragraph (1) letter b) and paragraph (2) of the General Data Protection Regulation.

Therefore, the company Realmedia Network SA (imobiliare.ro) was sanctioned with fine in amount of Lei 39,272, the equivalent of EUR 8,000.

Following some online information, our institution acted on own initiative regarding a potential security breach of the personal data encountered by Realmedia Network SA.

Within the investigation performed it was found that the breach of the data security took place at the level of a service used by the controller for generating the platform imobiliare.ro.

This situation led to the unauthorized disclosure or unauthorized access to the following personal data: first name, last name, telephone number, e-mail address, post address, personal identification number, signature, copies of the identity cards, inclusively identification codes, position/capacity, banking data, information included within the land registry excerpts/cadastral maps, ownership titles, profile images of the users, which led to the impairment of a number of 194,309 natural data subjects.

Thus, the controller Realmedia Network SA was sanctioned with fine for the breach of the provisions of Article 32 paragraph (1) letter b) and paragraph (2) of the General Data Protection Regulation, given that it did not implement adequate technical and organizational measures in order to ensure a level of security corresponding to the processing risk.

Legal and Communication Department

A.N.S.P.D.C.P.