On 25 August 2021, the Romanian DPA announced it sanctioned a NGO in the transportation sector with a fine of RON 10,000 for failure to comply with the measures imposed during an investigation.
The investigation was launched following the receipt of an intimation in respect to the processing of minors’ personal data (images) carried out by the controller through its website. During the investigation, the DPA issued a warning for failure to provide the requested information. The DPA also issued a Remediation Plan including the measure to provide such information within 5 working days from the communication of the minutes.
As the NGO failed to comply with the measures imposed, the DPA concluded that the said controller infringed Article 14 of Law No. 190/2018 (Minor offences and sanctions imposed to public authorities and bodies) in conjunction with Article 58 of the GDPR (Competence of supervisory authorities).
The full press release is available here (only in Romanian).
