On 18 April 2022, the Romanian DPA announced that it sanctioned a major retailer with a EUR 1,000 fine for failure to ensure the right to erasure. Additionally, the DPA has required that the controller takes the necessary measures to ensure that it respects, in all cases, the rights of data subjects under the GDPR.
The investigation was launched following the data subject’s complaint, whereby the DPA concluded that, although the data subject has repeatedly exercised his or her right to erasure, the controller has failed to prove that it sent a response to the requests within the legal term provided by the GDPR.
The press release is available here (only in Romanian).
