IN THE SPOTLIGHT

AdobeStock_242262576

Retail and e-commerce company fined for unlawful marketing calls

On 8 September 2026, the Romanian DPA concluded an investigation into a company operating in the retail sector. According to the DPA, the controller committed infringements concerning the right to object to direct marketing. As a result, the DPA issued an administrative fine amounting to RON equivalent of EUR 2,000. The investigation commenced following a complaint from a data subject who repor…
This technology-inspired data abstract background is perfect for capturing the essence of the internet's vast expanse of information.

Controller fined EUR 3,000 for GDPR in the context of a phishing attack

On 19 August 2026, the Romanian DPA concluded an investigation into an auto repair services company. According to the DPA, the controller committed a GDPR infringement concerning the security of personal data. As a result, the DPA issued an administrative fine amounting to the RON equivalent of EUR 3,000. The investigation was initiated following a notification submitted by the controller conce…
Abstract digital data background. Wave with moving dots. Musical stream of sounds. 3D .

Controller fined a total of EUR 45,000 for GDPR infringements and approx. EUR 10,000 for unlawful marketing calls

On 6 August 2026, the Romanian DPA concluded an investigation into a retail company. According to the DPA, the controller committed several GDPR infringements concerning data security, transparency, and data minimization. As a result, the DPA issued administrative fines amounting to RON equivalent of EUR 45,000. The investigation commenced following complaints submitted by several data subjects…

ARTICLES

Abstract digital data background. Wave with moving dots. Musical stream of sounds. 3D .

Romanian DPA Report – A Year in Review – 2024

Authors: Iurie Cojocaru, Diana Albu
Romanian DPA case studies – our top 5 picks 1. Refusal to provide actual call recording and provision of transcript only Case study: A customer filed a complaint with the Romanian DPA, claiming that a mobile phone company had denied her right of access by refusing to prov…

Speaking engagements

AdobeStock_469644365 [Converted]

Iurie Cojocaru attended the IAPP UK Intensive 2026 Conference

Between 23-26 February, Iurie Cojocaru, Partner and Head of the Data Protection practice attended the IAPP UK Intensive 2026, a premier gathering for professionals in the fields of privacy, artificial intelligence governance and digital responsibility. This year’s intensive showcased a broad spectrum of voices and perspectives and explored legislations, regulations, technology and operational p…
Cyber security and information network protection. Future technology network for business and internet concept. Earth element furnished by Nasa

Oana Stefan – speaker at an online debate organized by Juridice.ro

On February 9, our colleague, Oana Stefan, Associate in the Data Protection practice, was a speaker at the online debate “Online platforms, all eyes and ears. At GDPR”, organized by Juridice.ro. The debate was live on Juridice.ro. More details about the event and speakers are available here.
AdobeStock_469644365 [Converted]

Iurie Cojocaru – speaker at the GDPR Data Privacy Observer 2026 conference

On January 22, Iurie Cojocaru, Partner and Head of the Data Protection practice, was a speaker at the 5th edition of the GDPR Data Privacy Observer 2026 conference. Iurie joined the discussions in the first panel of the event and talked about the impact of the Omnibus package on data protection. Also, during the fifth edition Awards Gala organized by the Romanian Magazine for the Protection …

Statistics