A fine was imposed on the Romanian mobile phone provider Orange for failing to safeguard the confidential information of its customers.
The issue was discovered by a customer who brought their phone in for repair and received a temporary device to use until the repair on their own device was completed.
The customer noticed that the temporary device contained personal information of previous users, including automatic log-ins for online services, details about their bank account balances, text messages and a list of their contacts.
The customer informed Orange about the data on the device, but he claimed that his complaint was not taken into account by the company.
The National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania investigated the incident and concluded that Orange did not comply with the rules for safeguarding confidential information.
Therefore, the company received a fine of 10,000 RON / €2,255 / $2,800, given that the temporary telephone device provided by the repair department belongs to Orange.
