Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Compania Națională Poșta Română S.A.: Insufficient legal basis for data processing
The Romanian DPA has imposed a fine of EUR 5,000 on the Romanian Post (Compania Națională Poșta Română S.A.).
Full text
The Romanian DPA has imposed a fine of EUR 5,000 on the Romanian Post (Compania Națională Poșta Română S.A.). During its investigation, the DPA found that the controller had processed personal data of employees without a valid legal basis.
Industry: Transportation and Energy
How it connects
Related across sources
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Apr 17, 2023 Supervision Controllers Supervisory Authorities
1421/2022 Cyprus court upholds €5,000 DPA fine on Pancyprian Judo Federation for Article 31 GDPR On 3 November 2021, a data subject filed a complaint with the Cypriot DPA against an individual who managed a club affiliated with the Pancyprian Judo Federation. The complaint… ADMINISTRATIVE COURT OF CYPRUS May 20, 2026 Supervisory Authorities Processors Controllers
29 K 3490/24 VG Düsseldorf: data subjects challenge district's sharing of personal data in water-law A district (the controller), acting as the lower water authority, initiated administrative proceedings after identifying unauthorised riverbank works and a private jetty on two… Administrative Court Düsseldorf Jun 22, 2026 Personal Data Supervisory Authorities Supervision
Opinion 26/2024 “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented ·Opinion ·EDPB Dec 2, 2024 Certification Supervision Supervisory Authorities
Opinion 5/2026 Arcadis Group — processor BCRs ·Opinion ·EDPB Feb 10, 2026 International Transfer Processors Codes of Conduct
Opinion 9/2025 Worldline Group — processor BCRs EPDB, Opinion 9/2025 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Worldline Group, 2025. ·Opinion ·EDPB May 21, 2025 International Transfer Processors Codes of Conduct