GDPR | 4-year anniversary – Our top picks of past and upcoming judgements of the Court of Justice of the European Union
AI Omnibus enters into forceOn 27 July 2026, the AI Omnibus, proposed by the European Commission as part of the Digital Omnibus …
A telecommunications services company fined EUR 100,000 for inadequate data security measuresOn June 17, 2026, the Romanian DPA concluded an investigation into a telecommunications services com…
Bucharest Court of Appeal confirms the annulment of GDPR sanctionOn 8 July, 2026, a data protection-related court case involving a Romanian data controller challengi…
Software development company sanctioned for failing to properly respond to data erasure requestsOn June 1, 2026, the Romanian Data Protection Authority (DPA) concluded an investigation into a soft…
Electronics and home appliances retail company sanctioned for inadequate data security measures and failure to notify the data breachOn June 18, 2026, the Romanian DPA concluded an investigation into a company operating in the electr…
Processor sanctioned for inadequate security measures leading to unlawful disclosure of personal dataOn June 15, 2026, the Romanian DPA concluded an investigation into a company operating in the privat…
Controller sanctioned for inadequate security measures and failure to notify the data breach within the statutory time limitOn May 29, 2026, the Romanian DPA concluded an investigation into a banking and financial services c…
Bucharest Court of Appeal partially overturns GDPR sanction by annulling corrective measureA recent data protection-related court case involving a Romanian data controller challenging GDPR-re…
Gambling company sanctioned for unlawful processing and failure to verify data accuracyOn April 28, 2026, the Romanian DPA concluded an investigation into a gambling company. The DPA foun…
An engineering and technical consulting company sanctioned for inadequate security measuresOn April 3, 2026, the Romanian DPA concluded an investigation into an engineering and technical cons…