Controller fined EUR 3,000 for GDPR in the context of a phishing attack
On 19 August 2026, the Romanian DPA concluded an investigation into an auto repair services company.…
Controller fined a total of EUR 45,000 for GDPR infringements and approx. EUR 10,000 for unlawful marketing calls
On 6 August 2026, the Romanian DPA concluded an investigation into a retail company. According to th…
AI Omnibus enters into force
On 27 July 2026, the AI Omnibus, proposed by the European Commission as part of the Digital Omnibus …
A telecommunications services company fined EUR 100,000 for inadequate data security measures
On June 17, 2026, the Romanian DPA concluded an investigation into a telecommunications services com…
![AdobeStock_469644365 [Converted]](https://privacyoutloud.ro/wp-content/uploads/2022/11/AdobeStock_469644365-Converted-710x355.jpg)
Bucharest Court of Appeal confirms the annulment of GDPR sanction
On 8 July, 2026, a data protection-related court case involving a Romanian data controller challengi…
Processor sanctioned for inadequate security measures leading to unlawful disclosure of personal data
On June 15, 2026, the Romanian DPA concluded an investigation into a company operating in the privat…
GDPR | 8-year anniversary. Our top picks of past and upcoming judgements of the Court of Justice of the European Union
Authors: Iurie Cojocaru, Eduard Rașcă
Our top judgements of the Court of Justice of the Eu…Bucharest Court of Appeal partially overturns GDPR sanction by annulling corrective measure
A recent data protection-related court case involving a Romanian data controller challenging GDPR-re…
An engineering and technical consulting company sanctioned for inadequate security measures
On April 3, 2026, the Romanian DPA concluded an investigation into an engineering and technical cons…
Prahova Tribunal partially overturns GDPR sanction applied in the context of disclosure of data
A recent court case involving a Romanian data controller and the Romanian Data Protection Authority …
