The Romanian DPA issues EUR 2,000 fine for failure to provide the information requested in order to conduct an investigation


On 9 June 2021, the Romanian DPA announced it imposed a fine of EUR 2,000 to a controller for not providing to the authority the information requested after a data subject filed a complaint for the alleged illegal processing of the personal data of the natural person (telephone number), by repeatedly contacting him by telephone, without prior consent.

The Romanian DPA sanctioned the controller for not providing the information although he confirmed the receipt of the request. Moreover, the Romanian DPA has ordered the controller to transmit to the authority all the requested information, within 5 working days from the communication of the report.

The full press release is available here (only in Romanian).