For the occasion of the Data Protection Day in 2024, the DPA Romania issued a brochure including, among others, a summary of its monitoring and control activities in 2023.
This summary covers the key numbers for the Romanian DPA’s 2023 activity, as well as certain statistics, including graphs in comparison with previous years.
A. Statistics on complaints, notices (Romanian: sesizări) and data breach notifications
(a) 4,380 complaints received (as compared to 3,899 complaints in 2022);
(b) based on them, 207 investigations were opened (as compared to 281 investigations in 2022), resulting in:
- 39 fines, out of which 36 fines based on the GDPR (totally amounting to RON 687,102.38 – equivalent to EUR 138,700) and 2 fines based on ePrivacy Law 506/2004 (amounting to RON 20,000);
- 120 reprimands;
- 80 corrective measures;
(c) 211 notices (Romanian: sesizări) and 181 data breach notifications received (as compared to 198 notices and 155 data breach notifications in 2022);
(d) based on them, 341 ex officio investigations were opened (as compared to 314 investigations in 2022), resulting in:
- 34 fines, out of which 31 fines based on the GDPR (totally amounting to RON 1,541,163 – equivalent to EUR 309,900) and 2 fines based on ePrivacy Law 506/2004 (amounting to RON 80,000);
- 66 reprimands;
- 58 corrective measures;
- 3 warnings.
(e) in total: 4,772 complaints, notices (Romanian: sesizări) and notifications of personal data breaches received (as compared to a total of 4,252 in 2022);
(f) based on them, 548 investigations were opened, resulting in:
- 73 fines totally amounting to RON 2,348,265 – equivalent to approx. EUR 472,100 (as compared to 69 fines totally amounting to RON 1,058,863 – equivalent to approx. EUR 213,100 in 2022);
- 186 reprimands (as compared to 134 reprimands in 2022);
- 138 corrective measures (as compared to 93 corrective measures in 2022).
B. Other statistics:
- 970 requests received for points of view on matters related to the protection of personal data (as compared to 948 such requests in 2022);
- 103 legislative drafts on which Romanian DPA issued its notice (as compared to 107 legislative drafts in 2022);
- 73 press releases (as compared to 64 press releases in 2022);
- 47 new files pending in court dealt by Romanian DPA (as compared to 40 new claims in 2022);
- 14 multinational companies made requests analyzed by the Romanian DPA for the approval of binding corporate rules – BCRs (as compared to 34 companies in 2022).
The brochure is available here (in both Romanian and English).
