Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Natural Person: Non-compliance with general data processing principles

The Romanian DPA has imposed a fine of EUR 10,000 on a natural person.

€10,000 Fine
Natural Person
ROMANIA
Art. 5 GDPR Art. 6 GDPR Art. 9 GDPR Art. 10 GDPR Art. 12 GDPR Art. 13 GDPR Art. 14 GDPR Art. 17 GDPR Art. 58 GDPR
Criminal Data Personal Data Types of Special Categories of Personal Data Controllers Healthcare
Jan 30, 2026 Source dataprotection.ro

Full text

The Romanian DPA has imposed a fine of EUR 10,000 on a natural person. The controller operated a website on which identity cards containing personal data, including special category data, possible criminal convictions, data on the intimate lives of data subjects and possible debts, were published. The processing of this data was not based on a sufficient legal basis, and the controller did not ensure that the data was correct, complete or transparent. Furthermore, the controller did not adequately respond to requests by data subjects to delete their data. Furthermore, the DPA found that the controller did not provide the necessary information on its website, nor did it respond to requests from the DPA.

Industry: Individuals and Private Associations

How it connects

References

All 12

Related across sources

C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems C-311/18 (Schrems II) Jul 16, 2020 Privacy Shield Processing Agreement International Transfer
C-807/21 Deutsche Wohnen SE v Staatsanwaltschaft Berlin C-807/21 (Deutsche Wohnen) Dec 5, 2023 Fines Public Authority Processors
C-136/17 GC and Others v CNIL C-136/17 (GC and Others) Sep 24, 2019 Right to be Forgotten Legitimate Interest Criminal Data
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) Jan 12, 2023 Supervisory Authorities IP Address Supervision
C‑474/24 NADA Austria and Others C‑474/24 - NADA Austria and Others Several data subjects were subject to suspension proceedings by the Austrian Anti-Doping Legal Commission (ÖADR). Under Austrian law, the National Anti-Doping Agency (“NADA”)… Jul 24, 2026 Criminal Data Types of Special Categories of Personal Data Material scope (GDPR)
C-115/22 SO The Court of Justice of the European Union (Grand Chamber) ruled on a preliminary ruling request from the Unabhängige Schiedskommission Wien concerning the interpretation of GDPR… Grand Chamber May 7, 2024 Supervision Criminal Data Processors
Related documents