Press release – 6th of August 2013
The president of the National Supervisory Authority for Personal Data Processing, Anca Opre, ordered the application of a contravention fine in the amount of 2.000 lei to the Bucharest Public Transportation Company, for making copies of identity documents of pupils and students who ask for discounted subscription. This deed constitutes a contravention of unlawful processing of personal data, according to Article 33 of Law no. 67772001.
During the investigation conducted, it was ascertain that the data controller has scanned and detained copies of identity documents and other documents that contained the personal identification number of the applicants (e.g. birth certificate, passport, residency card), by infringing the dispositions Article 8 of Law no. 677/2001.
We underline the fact that making copies of documents that the personal identification number is prohibited under the provisions of Article 6 of Decision no. 132/2011 of the National Supervisory Authority for Personal Data Processing, except for the situation in which there is an express legal provision or when the person's consent was obtain or with the agreement of the same authority.
At the same time, in consideration of the risks to the privacy of a significant number of people, the National Supervisory Authority for Personal Data Processing ordered the Bucharest Public Transportation Company to cease withholding copies of those documents and to delete the database already created, within 10 days from the date of issuance of Decision no. 68 of 31st of July 2013.
