GDPR | 4-year anniversary – Our top picks of past and upcoming judgements of the Court of Justice of the European Union
Romanian cybersecurity authority announces first sanction for failure to comply with NIS2 registration notification requirementsOn 30 September 2026, the Romanian National Cyber Security Directorate (DNSC) announced its first ad…
Food company fined EUR 5,000 for unlawful processing of employees’ biometric dataOn 25 September 2026, the Romanian DPA concluded an investigation into a company operating in the fo…
Retail and e-commerce company fined for unlawful marketing callsOn 8 September 2026, the Romanian DPA concluded an investigation into a company operating in the ret…
Controller fined EUR 3,000 for GDPR in the context of a phishing attackOn 19 August 2026, the Romanian DPA concluded an investigation into an auto repair services company.…
Controller fined a total of EUR 45,000 for GDPR infringements and approx. EUR 10,000 for unlawful marketing callsOn 6 August 2026, the Romanian DPA concluded an investigation into a retail company. According to th…
AI Omnibus enters into forceOn 27 July 2026, the AI Omnibus, proposed by the European Commission as part of the Digital Omnibus …
A telecommunications services company fined EUR 100,000 for inadequate data security measuresOn June 17, 2026, the Romanian DPA concluded an investigation into a telecommunications services com…
Bucharest Court of Appeal confirms the annulment of GDPR sanctionOn 8 July, 2026, a data protection-related court case involving a Romanian data controller challengi…
Software development company sanctioned for failing to properly respond to data erasure requestsOn June 1, 2026, the Romanian Data Protection Authority (DPA) concluded an investigation into a soft…
Electronics and home appliances retail company sanctioned for inadequate data security measures and failure to notify the data breachOn June 18, 2026, the Romanian DPA concluded an investigation into a company operating in the electr…