On the 13th of February 2020, the National Supervisory Authority finalised an investigation at controller Association “SOS Infertilitatea” and found that the controller did not submitted the information requested by the supervisory authority pursuant to Article 58 paragraph (1) letters a) and e) of the General Data Protection Regulation.

The controller was sanctioned with an administrative fine of 9,925. lei, the equivalent of 2,000 euros, pursuant to Article 83 paragraph (5) letter e) of the Regulation (EU) 2016/679.

The National Supervisory Authority received an intimation stating that the Association “SOS Infertilitatea” disclosed personal data without the consent of the data subject.

The supervisory authority requested more information regarding the notified aspects, but the controller did not respond to the requests of our institution. Following the telephone contact of the controller, the president of the association expressed his option to receive the request of the Supervisory Authority by e-mail to an address indicated by him.

As the Association “SOS Infertilitatea” did not send the requested information until the conclusion of the minutes of finding/sanctioning, it was sanctioned with a fine.

At the same time, the corrective measure to transmit to the Authority, in writing, all the requested information, within 5 working days from the communication of the minutes, was imposed to the controller.

A.N.S.P.D.C.P.