ANSPDCP (Romania) - Fine against SC Grupex 2000 SRL

From GDPRhub
ANSPDCP (Romania) - Fine against SC Grupex 2000 SRL
Authority: ANSPDCP (Romania)
Jurisdiction: Romania
Relevant Law: Article 6 GDPR
Article 5(1)(a) GDPR
Article 5(1)(b) GDPR
Article 5(1)(f) GDPR
Article 5(1)(c) GDPR
Article 5(2) GDPR
Article 9 GDPR
Type: Investigation
Outcome: Violation Found
Decided: 07.01.2022
Published: 01.02.2022
Fine: 1000 EUR
Parties: SC Grupex 2000 SRL
National Case Number/Name: Fine against SC Grupex 2000 SRL
European Case Law Identifier: n/a
Appeal: Unknown
Original Language(s): Romanian
Original Source: ANSPDCP (in RO)
Initial Contributor: Diana Rosu

The Romanian DPA fined a news website approximately €1000 after it published video recordings of medical patients in breach of Articles 6 and 9 GDPR.

English Summary


The Romanian DPA started an investigation against the news website SC Grupex 2000 SRL after a regional Social Assistance and Child Protection Agency notified the DPA that video recordings of some of their hospitalised patients were published on its website.


The Romanian DPA held that the publishing of these recordings constituted an unlawful processing of personal data in breach of Articles 6 and 9 GDPR, with reference to the principles in Article 5(1)(a), (b), (c), (f) and 5(2) GDPR. Based on these considerations, the DPA issued a fine of approximately €1000 (RON 4943.60) against the website.

Additionally, the Romanian DPA also ordered the website to implement appropriate technical and organisational measures to ensure compliance with GDPR.


Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details.


RGPD fine

The National Supervisory Authority completed on 07.01.2022 an investigation at the operator of SC Grupex 2000 SRL, on which occasion it was found that the provisions of art. 6 and art. 9 by reference to the principles provided by art. 5 para. (1) lit. a), b), c) and f) and par. (2) of the General Data Protection Regulation.

As such, the operator was sanctioned with a fine of 4,943.60 lei (equivalent to 1,000 EURO).

The investigation was started as a result of sending notifications from a County Directorate of Social Assistance and Child Protection, having as object the posting of a video material containing images of some patients, published on the website owned by SC Grupex 2000 SRL.

During the investigation, it was found that SC Grupex 2000 SRL illegally processed the personal data of some individuals, institutionalized patients, in a video material available on the operator's website, in violation of the provisions of art. 6 and art. 9 by reference to the principles provided by art. 5 para. (1) lit. a), b), c) and f) and par. (2) of the RGPD.

At the same time, during the operator's investigation, the corrective measure was applied to ensure the compliance with RGPD of the personal data processing operations, by implementing adequate technical and organizational measures, in compliance with art. 5 and art. 6 of the RGPD.

Legal and Communication Department