Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Natural Person: Non-compliance with general data processing principles

€10,000 Fine
Natural Person
ROMANIA
Art. 5 GDPR Art. 6 GDPR Art. 9 GDPR Art. 10 GDPR Art. 12 GDPR Art. 13 GDPR Art. 14 GDPR Art. 17 GDPR Art. 58 GDPR
Criminal Data Personal Data Health Data Controllers Healthcare IP Address Special Categories of Data Processing
Jan 30, 2026 Source

How it connects

Related across sources

Guidance Guidelines 2/2018 on derogations of Article 49 under Regulation 2016/679 EDPB News De Autoriteit Persoonsgegevens publiceert een rapport over de risicoanalyse van de AVG (Algemene Verordening Gegevensbescherming). AEPD Guidance EDPB Annual Report 2021 EDPB Case Law HvJ EU: Privacy Shield ongeldig verklaard (Schrems II) Hof van Justitie EU Case Law GC and Others v CNIL CJEU Literature GDPR Implementation Series ∙ Hungary: Introduction to the GDPR Application and a Brief History of Data Protection European Data Protection Law Review

Full text

The Romanian DPA has imposed a fine of EUR 10,000 on a natural person. The controller operated a website on which identity cards containing personal data, including special category data, possible criminal convictions, data on the intimate lives of data subjects and possible debts, were published. The processing of this data was not based on a sufficient legal basis, and the controller did not ensure that the data was correct, complete or transparent. Furthermore, the controller did not adequately respond to requests by data subjects to delete their data. Furthermore, the DPA found that the controller did not provide the necessary information on its website, nor did it respond to requests from the DPA.

Industry: Individuals and Private Associations

Original document at the source www.dataprotection.ro

Similar Content