Enforcement · ANSPDCP (Romania) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Fine against There's an AI for that S.R.L

In October 2025, the Romanian National Supervisory Authority for Personal Data Processing (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal – ANSPDCP) concluded an investigation into THERE’S AN AI FOR THAT S.R.L., a company operating a website that used cookies. The investigation began after a data subject submitted a complaint alleging a possible breach of data protection rules. Holding — The ANSPDCP found that the controller’s website stored cookies that were not technically necessary on users’ devices. The authority also found that users were not provided with clear and complete information about these cookies and that their explicit consent had not been obtained before such cookies were placed. The ANSPDCP held that the controller violated Article 4(5)(a) and Article 4(5)(b) of Law No. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector (implementing ePrivacy Directive). As a result, the authority imposed an administrative fine of RON 30,000 (€6,000) on the controller for processing data through non-essential cookies without proper information or consent.

€30 Fine
Romania
Cookies Telecommunications Direct Marketing Personal Data Consent Controllers Processing Supervisory Authorities
Jul 24, 2026 Source

How it connects

Related across sources

Literature If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation Computer law & security review Case Law Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) Court of Justice of the European Union Guidance Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation EDPB Case Law CE - 473833 Supreme Administrative Court Guidance EDPB Annual Report 2024 EDPB Case Law Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) CJEU

Full text

04.11.2025 Sanction for violation of Law no. 506/2004 The National Supervisory Authority for Personal Data Processing completed, in October 2025, an investigation at the operator THERE’S AN AI FOR THAT S.R.L and found a violation of the provisions of art. 4 para. (5) let. a) and b) of Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector. As such, the operator was sanctioned with a fine of 30,000 lei. The investigation was initiated following a complaint by an individual regarding a possible violation of the provisions of the legislation in the field of personal data protection. During the investigation, the National Supervisory Authority for Personal Data Processing found that on the website owned by the operator, cookies were stored that were not technically necessary on the users' equipment, without clear and complete information and without the express consent of the data subjects. In this context, the operator was fined for violating the provisions of art. 4 para. (5) let. a) and b) of Law no. 506/2004. Legal and Communication Department A.N.S.P.D.C.P

Original document at the source gdprhub.eu
Related documents