# Individual trader (ride-hailing driver): Insufficient legal basis for data processing

- Type: Enforcement
- Source: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Date: 2026-11-05
- Original: https://www.enforcementtracker.com/ETid-3415
- Canonical: https://overview.legal/posts/607774
- Topics: Controllers, Personal Data, Supervision, Supervisory Authorities, Processing

## Summary

The Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) fined an individual trader operating as a ride-hailing driver €1,000 for violating Article 6(1) GDPR. The enforcement action centered on the controller's insufficient legal basis for processing personal data within the transportation sector. The authority imposed the monetary penalty to address the failure to establish a valid lawful ground for the data processing activities.

## Full text

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) fined Individual trader (ride-hailing driver) €1,000 on 2026-11-05 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 6 (1) GDPR
Sector: Transportation and Energy
Country: Romania
Source: https://www.dataprotection.ro/?page=Comunicat_Presa_05_11_2026_2

## Cited law provisions (2)

### GDPR — gdpr-art-6-par-1-en

Processing shall be lawful only if and to the extent that at least one of the following applies:

### GDPR — gdpr-art-6-en

Lawfulness of processing

---
Generated by overview.legal · https://overview.legal/posts/607774 · 2026-11-14