![AdobeStock_469644365 [Converted]](https://privacyoutloud.ro/wp-content/uploads/2022/11/AdobeStock_469644365-Converted-710x355.jpg)
Controller sanctioned for inadequate security measures and failure to notify the data breach within the statutory time limit
On May 29, 2026, the Romanian DPA concluded an investigation into a banking and financial services c…
Gambling company sanctioned for unlawful processing and failure to verify data accuracy
On April 28, 2026, the Romanian DPA concluded an investigation into a gambling company. The DPA foun…
Bucharest Tribunal confirms DPA sanction for unlawful disclosure of personal data
On March 16, 2026, the Bucharest Tribunal dismissed a complaint from a company in the oil and gas se…
![AdobeStock_295690916 [Converted]](https://privacyoutloud.ro/wp-content/uploads/2023/07/AdobeStock_295690916-Converted-710x355.jpg)
Suceava Tribunal confirms DPA sanction for unlawful disclosure of personal data and failure to notify the data breach
On February 19, 2026, the Suceava Tribunal dismissed a complaint from a company in the tourism secto…
Energy-sector controller fined for inadequate security measures
On October 9, 2025, the Romanian DPA announced the conclusion of an investigation concerning a contr…
From Governance to Enforcement: What Applies Under the AI Act as of August 2025
On 2 August 2025, a new set of provisions under Regulation (EU) 2024/1689 on Artificial Intelligence…
Law 124/2025 approves with amendments the NIS2-transposing ordinance in Romania
On 7 July 2025, Law No. 124/2025 was published in the Official Gazette of Romania, approving Governm…
Romanian DPA fines controller with EUR 3000 following multiple GDPR breaches
On 26 June 2025, the Romanian DPA announced new sanctions, consisting of 2 fines of 2000 EUR and 100…
Failure to respond to authority requests for information sanctioned by the Romanian DPA
Lately, the Romanian DPA announced two new sanctions for violation of GDPR article 58.
A natural …
Court partially overturns GDPR sanctions applied in the context of GPS monitoring
A recent court case involving a Romanian data controller and the Romanian Data Protection Authority …
