When does personal data become health data? The CJEU on inferred health information
Authors: Oana Stefan
The question of what constitutes health data is not a new one; it has…
Controller fined EUR 3,000 for GDPR in the context of a phishing attack
On 19 August 2026, the Romanian DPA concluded an investigation into an auto repair services company.…
Controller fined a total of EUR 45,000 for GDPR infringements and approx. EUR 10,000 for unlawful marketing calls
On 6 August 2026, the Romanian DPA concluded an investigation into a retail company. According to th…
AI Omnibus enters into force
On 27 July 2026, the AI Omnibus, proposed by the European Commission as part of the Digital Omnibus …
A telecommunications services company fined EUR 100,000 for inadequate data security measures
On June 17, 2026, the Romanian DPA concluded an investigation into a telecommunications services com…
![AdobeStock_469644365 [Converted]](https://privacyoutloud.ro/wp-content/uploads/2022/11/AdobeStock_469644365-Converted-710x355.jpg)
Bucharest Court of Appeal confirms the annulment of GDPR sanction
On 8 July, 2026, a data protection-related court case involving a Romanian data controller challengi…
Processor sanctioned for inadequate security measures leading to unlawful disclosure of personal data
On June 15, 2026, the Romanian DPA concluded an investigation into a company operating in the privat…
GDPR | 8-year anniversary. Our top picks of past and upcoming judgements of the Court of Justice of the European Union
Authors: Iurie Cojocaru, Eduard Rașcă
Our top judgements of the Court of Justice of the Eu…Bucharest Court of Appeal partially overturns GDPR sanction by annulling corrective measure
A recent data protection-related court case involving a Romanian data controller challenging GDPR-re…
