Premier Restaurants Romania SRL, the operator of McDonald's, was fined 8,000 euros by ANSPDCP for violating the data security of employees following a cyber attack.

The National Authority for the Supervision of Personal Data Processing (ANSPDCP) has fined Premier Restaurants Romania SRL, the operator of the McDonald's restaurant chain, with a fine of 8,000 euros for violating the GDPR Regulation. The investigation was initiated after the operator reported a breach of personal data security, following a cyber attack that allowed unauthorized access to sensitive employee information, such as names, surnames, date of birth, and email addresses. ANSPDCP found that Premier Restaurants had not implemented adequate technical and organizational measures to protect the data, which led to their exposure. The company has already paid the imposed contravention fine.