Search results

Data Protection Authority for Romania. It resides in Bucharest and is in charge of enforcing GDPR in Romania. The Romanian DPA is a public authority with

The Romanian DPA found that Telekom Romania did not implement appropriate technical and organisational measures to ensure a level of security appropriate

Personal) is the national data protection authority for Romania. → Details see ANSPDCP (Romania) Romania's judicial system has the following structure: District

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 08/03/2023 Penalty for GDPR

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 03.01.2023 Fine for GDPR

The Romanian DPA (ANSPDCP) fined electronics and appliance company EUR 3,000 because it kept contacting an individual for commercial purposes, although

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 18.01.2023 Penalty for GDPR

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 04.01.2023 Penalty for GDPR

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 18.11.2022 Penalty for GDPR

The ANSPDCP fined € 2.000 Vodafone România S.A. for violations of Article 13(1) Law no. 506/2004, read in conjunction with Article 13(5) of the same Law

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 03.10.2022 Fine for GDPR

OTP Bank Romania SA, a Romanian financial institution was sanctioned with a fine of EUR 3,000 for the failure to adopt technical and organizational measures

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 24.04.2023 Penalty for GDPR

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 12.01.2023 Penalty for GDPR

The Romanian DPA (ANSPDCP) fined Vodafone €4000 for not responding to access and erasure requests in breach of Articles 12, 15, and 17 GDPR. The ANSPDCP

resulting in the publication of personal data online. The controller "Kaufland Romania SCS", a chain of commercial stores, was alerted by a data subject that a

informed what personal data were exposed to him on this occasion and if ANSPDCP was notified in connection with this incident, in the reply sent the operator

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 07.09.2023 Penalty for GDPR

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 31.08.2023 A new fine - natural

confidentiality and accountability. The ANSPDCP carried out investigation against the Romanian telecommunication operator Vodafone România SA. The company transmitted

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 31.01.2023 Penalty for GDPR

The Romanian DPA (ANSPDCP) fined Estee Lauder Romania € 3.000 for unlawful collection and disclosure of personal data without any valid legal basis. The

The Romanian DPA (ANSPDCP) imposed a €1000 fine on Qualitance QBS SA for disclosing 295 e-mail addresses to other recipients. The Romanian DPA (ANSPDCP)

ANSPDCP fined energy provider Enel Energie Muntenia SA for violation of Article 32 GDPR. The DPA found that the provider sent documents with the complainant's

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. On 15.07.2020, the National

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. The National Supervisory

The Romanian DPA (ANSPDCP) fined an energy company EUR 3,000 for violation of the security and confidentiality of personal data. The energy company Enel

The ANSPDCP fined association EUR. 2,000 because it did not respond to its order to provide information and to allow access to personal data as required

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 12.05.2023 New sanctions

The Romanian DPA (ANSPDCP) has issued a €3000 fine against a website operator who failed to prevent the unauthorised disclosure of its customers' personal

Following a complaint, the ANSPDCP initiated investigation against the Romanian Bank Banca Comercială Română. The ANSPDCP found that the Bank "has not

email addresses of the data subjects. The data controller notified the ANSPDCP of the data breach, which triggered the DPA's investigation. Therefore,

The Romanian DPA (ANSPDCP) fined Telekom Romania Communications SA € 3,000 for violation of Article 32 GDPR. The operator did not implement sufficient

The Romanian DPA (ANSPDCP) fined SC Medicover SRL with €2,000 after completing an investigation concerning the operator and finding a violation of Article

The Romanian DPA (ANSPDCP) conducted an investigation into ING Bank N.V. Amsterdam – Bucharest Branch, following a personal data breach notification, and

The Romanian DPA (ANSPDCP) imposed an approximately €2000 fine on SC C&V Water Control SA for failing to provide information to the DPA during the investigation

The Romanian DPA (ANSPDCP) fined an eCommerce company €5000 for making available on its website a document containing detailed records of transactions

The Romanian DPA (ANSPDCP) fined BNP Paribas Personal Finance S.A. Paris 10,000 RON for violating Article 13(1)(q) of the Law No 506/2004 by sending commercial

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. The National Supervisory

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. The National DPA completed

The Romanian DPA (ANSPDCP) fined leasing company €15,000 for violation of Article 32(1) and (2) GDPR after investigating a data breach reported by the

The Romanian DPA (ANSPDCP) issued a warning to the Cluj-Napoca Municipality as the General Directorate of Local Police breached Articles 5(1)(a) and 6(1)

The Romanian DPA (ANSPDCP) imposed a €3000 fine on ING Bank N.V. Amsterdam – Bucharest Branch for unlawfully processing the personal data of a natural

data only process that data at the request of the controller. The Romanian DPA (ANSPDCP) received several complaints regarding a security breach of personal

The Romanian DPA (ANSPDCP) issued a warning against the Bucharest Municipality - District 4 as the General Directorate of 4th District Local Police breached

The Romanian DPA (ANSPDCP) imposed a fine of €500 on a natural person who held the office of Secretary-General in a subsidiary branch of a political party

is a machine translation of the Romanian original. Please refer to the Romanian original for more details. The Romanian Supervisory Authority has completed

The Romanian DPA (ANSPDCP) fined an apartment building owners association €500 for illegally processing the image of a data subject. The owners association

The ANSPDCP fined € 11.000 Fan Courrier Express SRL for violations of f Article 32 paragraphs (1) and (2) GDPR. The controller Fan Courrier Express SRL

The ANSDPC in Romania fined BNP Paribas because it did not respond to the applicant’s access request within the one-month period required under Article

The ANSPDCP finalised two investigations at Raiffeisen Bank S.A. and Vreau Credit S.R.L. and fined the two data controllers for violation of Article 32(1)

The Romanian DPA fined the data controller for not responding to the Romanian DPA's request of information, during an investigation. A data subject submitted

controller World Class Romania S.A. made available a resignation request of a former employee on the employees' WhatsApp group. The Romanian DPA held that the

subject filed a complaint with the Romanian DPA (ANSPDCP), which initiated an investigation against the controller. The ANSPDCP's investigation found that Kaufland

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. The National Supervisory

measure. For a decision where both laws were applied see ANSPDCP - Fine against Telekom Romania mobile communications S.A. 2. Share blogs or news articles

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 06.03.2023 Sanctions for

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 18.10.2022 Sanctions for

Authority completed in December 2021 an investigation at the operator Kaufland Romania SCS and found a violation of the provisions of art. 15 para. (3) of the

messages from Sephora Cosmetics Romania SA. During the investigation carried out, it was found that Sephora Cosmetics Romania SA sent the petitioner, on her

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. The National Supervisory

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 13.12.2021 & # 13; RGPD &

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 09/08/2022 A new penalty

83(5)(e) GDPR. In conclusion, the Romanian DPA fined the controller €1,000 for not providing the requested information. The Romanian DPA rarely published full

As a result, the Romanian DPA fined the controller €3,000. Unfortunately, this summary is based on a press-release, as the Romanian DPA does not publish

requirements of Article 13 of Law No. 190/2018 Implementing the GDPR in Romania, the DPA issued the controller a warning for violating Article 58(1)(a)

March 2022, a data subject filed a complaint with the Romanian DPA (ANSPDCP) against IKEA Romania S.R.L., claiming that he had repeatedly requested to exercise

GDPR. The Romanian Ombudsman forwarded to the Romanian DPA, several notifications. These notifications were mentioning that Salvati Romania Union Party

The Romanian DPA warned Telekom Romania for processing personal data for marketing purposes without a legal basis, and fined it approximately €2,000 (RON

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 20.06.2022 RGPD fine The

subjects filed a series of complaints with the Romanian DPA against the controller Megareduceri TV S.R.L. The Romanian DPA started an investigation against the

the Romanian DPA does not publish its full decisions. Share blogs or news articles here! The decision below is a machine translation of the Romanian original

receipt of the notification, it did not answer the ANSPDCP with the requested information. The ANSPDCP held that the association had violated the provisions

32(1), (2) and (4) GDPR. A data subject filed a claim before the Romanian DPA (ANSPDCP) against Condor SA, a parachute and military flight equipment manufacturer

FUEL SHOP SRL - is a gas station. The data subject complained to the ANSPDCP (Romania) that images of him taken by a video surveillance system installed

with art. 5 and art. 6 of the RGPD. Legal and Communication Department ANSPDCP

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 26.11.2021 & # 13; RGPD &

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 06.12.2021 & # 13; RGPD &

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 10.03.2022 RGPD fine The

the Romanian DPA fined it €2,000 for violating Article 29 GDPR and Article 32 GDPR. The company Vodafone Romania SA, the data controller, notified the

security. The political party Partidul Uniunea Salvați România (Controller) reported to the DPA that as a result of a cyber-attack, the data it stored on

publications on its website. The Romanian DPA rarely published full decisions. This summary is based on a press release of the Romanian DPA. Share blogs or news

subjects (the controller's employee) filed a complaint with the Romanian DPA. The Romanian DPA found that the controller unlawfully processed the data of

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 18.07.2023 A new penalty

THE ANSPDCP (Romanian DPA) fined IKEA Romania approx €1,000 for a data breach where personal data was erroneously made available online on an IKEA members'

Authority completed another investigation at the operator Party Uniunea Salvați Romania and found a violation of the provisions of art. 32 para. (1) lit. a) and

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 07.07.2022 Fine for violation

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 19.09.2022 A new penalty

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 27.06.2023 A new penalty

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 21.09.2022 Penalty for GDPR

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 01.02.2023 Penalty for GDPR

14 and 32 GDPR. The controller, the City Hall of Albeni (Gorj county, Romania) had implemented a CCTV system through which all employees of the City Hall

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 13.11.2023 Fine for violation

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 10.07.2023 Court decision

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. https://www.dataprotection

The Romanian DPA (ANSPDCP) fined a controller approximately €5,000 (RON 24,745) after it used CCTV systems to surveil its employees, record their conversations

his minor child with third parties, he lodged a complaint with the ANSPDCP (Romania). In the course of the investigation, the DPA found that the controller

The Romanian DPA (ANSPDCP) fined a controller approximately €2000 (RON 9839) for failing to provide the DPA with requested information during an investigation

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 22.02.2022 Sanction for violating

The Romanian DPA fined Alpha Bank România €1,000 for sending a document that contained personal data of four people to another recipient through WhatsApp

The Romanian DPA fined ING Bank NV Amsterdam Sucursala București €20,000 for a data breach, resulting in third parties having access to and consequently

58(1)(a) and (e) GDPR. The Romanian DPA rarely published full decisions. This summary is based on a press release of the Romanian DPA. Share blogs or news

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 22.09.2022 A new penalty

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. In January of the current

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 18.05.2023 A new penalty

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 25.10.2023 Penalty for GDPR

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. The National Supervisory

complaint filed by a data subject, the Romanian DPA started an investigation against Banca Comerciala Romana S.A. (the Romanian Commercial Bank) and found that

violation is summarised on GDPRhub - Fine against Vodafone România S.A. 4). Furthermore, Vodafone Romania has been constantly fined for GDPR/privacy-related violations

Article 17 GDPR. The controller is Telekom Romania, one of the biggest telecommunication providers in Romania. The data subject is a customer of the controller

press release of the Romanian DPA. Share blogs or news articles here! The decision below is a machine translation of the Romanian original. Please refer

their personal data. The Romanian DPA rarely published full decisions. This summary is based on a press release of the Romanian DPA. Share blogs or news

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 11.07.2022 Sanction for violating

cameras inside its offices, its employees filed a complaint with the Romanian DPA. The Romanian DPA started an investigation and found that: the purpose used

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 09.12.2022 Penalty for GDPR

the Romanian DPA does not publish its full decisions. Share blogs or news articles here! The decision below is a machine translation of the Romanian original

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 01.11.2021 & # 13; Sanction

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 23.08.2023 Fine for GDPR

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 22.02.2022 RGPD fine In February

certificates, affecting 35 natural persons. The investigation was started by ANSPDCP as a result of the notification of the controller for a data security violation

access request with Libra Internet Bank SA (data controller and a bank in Romania). The data subject required a copy of their personal data, including some

in Poland. More precisely, the IT system of the controller’s branch in Romania was integrated into the centralized system of Alior Bank SA Warsaw, based

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 08/09/2022 Penalty for GDPR

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 23.03.2023 Penalty for GDPR

institutions, we mention that, following the investigations carried out by ANSPDCP, it was found that operators such as UAT Cluj (Local Police), UAT Constanța

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. The National Supervisory

accessing the building complex of the controller. The investigation of the ANSPDCP (Romania), which was initiated upon a complaint, revealed that the processor

controller; the measures taken by the controller during the investigation by the ANSPDCP to remedy the issues raised; the degree of cooperation with the supervisory

The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. 16.11.2022 Sanctions for

owns the biggest online retailer in Romania (eMAG) and has websites available in three different languages: Romanian, Hungarian, and Bulgarian. The controller

You can add opinions and guidelines here! You can add opinions and guidelines here! You can add opinions and guidelines here! You can add opinions and

contract. Orange România appealed against the ANSPDCP's decision before the Tribunalul Bucureşti (Regional Court, Bucharest, Romania) which then requested

infringe the GDPR. The Data protection authority (the ANSPDCP) issued guidelines here. The ANSPDCP focused on the processing of health data under exceptional

ECJ, judgment of November 11, 2020, case C- 61/19 Rn. 40 - Orange România SA/ANSPDCP, = NJW 2021, 841). 123In view of this, the data protection notice