On 5 May 2020, the Romanian Data Protection Authority announced the application of a new GDPR fine.
The DPA sanctioned an operator in the banking sector with a fine of RON 24,163 (the equivalent of EUR 5,000) for failure to comply with the security of processing requirements provided under Article 32 para. (1), (2) and (4) of the GDPR.
The full press release is available here. (only in Romanian).