A real estate company from Moldova violated the personal data protection rules

Following the findings of the National Center for Personal Data Protection (NCPDP), a real estate company from the Republic of Moldova violated the personal data protection rules in relation to one of its clients.

The NCPDP was notified by a complaint alleging the breach of the principles of personal data protection. The employee of the real estate company published on Facebook the service contract, which contained the personal data of the petitioner (name, surname, IDNP, home address, telephone number), thus, they became public.

Following the actions taken by NCPDP, it was found that a service contract was concluded between the petitioner and the real estate company. Subsequently, there were divergences regarding the execution of the contractual obligations, which generated an exchange of remarks on Facebook. Consequently, the employee of the real estate company published the contract concluded between the parties.

The NCPDP found that by publishing the contract containing the petitioner’s personal data, the aim was to disclose this situation in order to be subject to public debates / opinions, given that the conflict, in essence, is not an event of public interest.

In this order of ideas, analyzing the materials accumulated during the examination of the case, NCPDP issued a decision by which it found the violation of the provisions of art. 4 para. (1) let. a), b) and art. 5 of the Law on personal data protection, by the employee of the real estate company.