GDPR | 4-year anniversary – Our top picks of past and upcoming judgements of the Court of Justice of the European Union
Retail and e-commerce company fined for unlawful marketing callsOn 8 September 2026, the Romanian DPA concluded an investigation into a company operating in the ret…
Controller fined EUR 3,000 for GDPR in the context of a phishing attackOn 19 August 2026, the Romanian DPA concluded an investigation into an auto repair services company.…
Controller fined a total of EUR 45,000 for GDPR infringements and approx. EUR 10,000 for unlawful marketing callsOn 6 August 2026, the Romanian DPA concluded an investigation into a retail company. According to th…
AI Omnibus enters into forceOn 27 July 2026, the AI Omnibus, proposed by the European Commission as part of the Digital Omnibus …
A telecommunications services company fined EUR 100,000 for inadequate data security measuresOn June 17, 2026, the Romanian DPA concluded an investigation into a telecommunications services com…
Bucharest Court of Appeal confirms the annulment of GDPR sanctionOn 8 July, 2026, a data protection-related court case involving a Romanian data controller challengi…
Software development company sanctioned for failing to properly respond to data erasure requestsOn June 1, 2026, the Romanian Data Protection Authority (DPA) concluded an investigation into a soft…
Electronics and home appliances retail company sanctioned for inadequate data security measures and failure to notify the data breachOn June 18, 2026, the Romanian DPA concluded an investigation into a company operating in the electr…
Processor sanctioned for inadequate security measures leading to unlawful disclosure of personal dataOn June 15, 2026, the Romanian DPA concluded an investigation into a company operating in the privat…
Controller sanctioned for inadequate security measures and failure to notify the data breach within the statutory time limitOn May 29, 2026, the Romanian DPA concluded an investigation into a banking and financial services c…