IN THE SPOTLIGHT

Cyber security safe encrypted digital data networks for secure global information technology - Conceptual 3D illustration rendering

Prahova Tribunal partially overturns GDPR sanction applied in the context of disclosure of data

A recent court case involving a Romanian data controller and the Romanian Data Protection Authority (Romanian DPA) has concluded with replacement of the fine with a warning. Background of the investigation The investigation, completed in January 2025, was initiated following a complaint about the controller’s unlawful disclosure of employee data to a third party. The Romanian DPA found that …
Big Data concept. Digital neural network. Introduction of artificial intelligence. Cyberspace of future. Abstract business 3D illustration, shallow depth of field

An automotive manufacturing company fined for inadequate data security measures

On January 19, 2026, the Romanian DPA concluded an investigation into an automotive manufacturing company. The DPA found that the company had violated its obligation concerning the principles relating to processing of personal data and the security of processing. As a result, the DPA issued two administrative fines amounting to RON equivalent of EUR 5,000 and EUR 10,000 respectively. The invest…
Cybersecurity and information or network protection. Future cyber technology web services for business and internet project

A gambling company fined for failing to properly respond to data access requests

On December 10, 2025, the Romanian DPA concluded an investigation into a gambling company. The DPA found that the company had violated its obligation on data subject rights, particularly, the obligations regarding the right of access, and consequently issued an administrative fine amounting to RON equivalent of EUR 15,000. The investigation was initiated following a complaint from a data subjec…

ARTICLES

Abstract digital data background. Wave with moving dots. Musical stream of sounds. 3D .

Romanian DPA Report – A Year in Review – 2024

Authors: Iurie Cojocaru, Diana Albu
Romanian DPA case studies – our top 5 picks 1. Refusal to provide actual call recording and provision of transcript only Case study: A customer filed a complaint with the Romanian DPA, claiming that a mobile phone company had denied her right of access by refusing to prov…
Digital graphs and hexagon grids with abstract high speed technology POV motion blur

GDPR | 7-year anniversary. Romanian DPA Publishes 2025 Q1 Enforcement Update

Authors: Iurie Cojocaru, Mihai Rotaru
As the EU General Data Protection Regulation (GDPR) marked its seventh anniversary on May 25, 2025, the Romanian DPA has released a short-form activity update covering the first four months of the year. The figures offer a snapshot of enforcement trends, complaint pattern…

Speaking engagements

AdobeStock_469644365 [Converted]

Iurie Cojocaru will attend the IAPP UK Intensive 2026 Conference

Between 23-26 February, Iurie Cojocaru, Partner and Head of the Data Protection practice will attend the IAPP UK Intensive 2026, a premier gathering for professionals in the fields of privacy, artificial intelligence governance and digital responsibility. This year’s intensive will showcase a broad spectrum of voices and perspectives and will explore legislations, regulations, technology and op…
Cyber security and information network protection. Future technology network for business and internet concept. Earth element furnished by Nasa

Oana Stefan – speaker at an online debate organized by Juridice.ro

On February 9, our colleague, Oana Stefan, Associate in the Data Protection practice, was a speaker at the online debate “Online platforms, all eyes and ears. At GDPR”, organized by Juridice.ro. The debate was live on Juridice.ro. More details about the event and speakers are available here.
AdobeStock_469644365 [Converted]

Iurie Cojocaru – speaker at the GDPR Data Privacy Observer 2026 conference

On January 22, Iurie Cojocaru, Partner and Head of the Data Protection practice, was a speaker at the 5th edition of the GDPR Data Privacy Observer 2026 conference. Iurie joined the discussions in the first panel of the event and talked about the impact of the Omnibus package on data protection. Also, during the fifth edition Awards Gala organized by the Romanian Magazine for the Protection …

Statistics