Corrective measures Archives - NNDKP Privacy Out Loud

Enforcement statistics in Romania May 2025

based on the press releases published by the Romanian supervisory authority on its website in that month

-                                        Number of fines
-                                        Highest fine
+,000 €
-                                        Lowest fine
+,000 €
-                                        Total amount of fines
+,000 €
-                                        Number of corrective measures
-                                        Number of fines triggered by data breach notifications
-                                        Number of fines triggered by complaints
-                                        Legal provisions mentioned in press releases
+                                        Article 5 (1) a), b) and (2), Article 6 (1), Article 12 (1), Article 14, Article 15, Article 32 (1), (2) and (4) GDPR

NNDKP’s Data Protection and Privacy practice has been providing expert advice on virtually all aspects related to this field, as a stand-alone group, since 2008. Our experienced team is one of the most awarded on the local market. It received the distinction of “Best law firm for Data Protection in Romania” in 2021 and 2019 at the Romanian Legal Awards Gala by Legal Marketing and the “Legal Innovation award for Data Protection in Romania” in 2018 by The Times, Legal Marketing. Our practice co-heads are seasoned experts in the data protection field in Romania.

Iurie Cojocaru

Partner, Head of the Data Protection practice

View profile on NNDKP

Roxana Ionescu

(1981-2023)

View profile on NNDKP

Tags:Corrective measuresDPADPA investigationGDPR fineJudgmentLawfulness of processingRight to erasure

Cyber security safe encrypted digital data networks for secure global information technology - Conceptual 3D illustration rendering

A company that unlawfully disclosed a recording on social media has its challenge against EUR 10,000 fine dismissed by the Iasi Tribunal

Tags:CJEU JudgmentCorrective measuresPersonal Data ProcessingRight of erasureRight to be forgottenUpdate

AdobeStock_336121533_resized

CJEU rules that a DPA can order the erasure of unlawfully processed data even in the absence of a request from a data subject exercising the right to be forgotten

Tags:Action PlanCorrective measuresDPADPA investigationFailure to provide requested informationGDPR fineNon-compliance with DPA request

Abstract Circuit board. Electronic computer hardware technology.

Comminatory fine applied to one of Bucharest’s districts for failing to respond to the requests

Tags:Action PlanCorrective measuresDPADPA investigationFailure to provide requested informationGDPR fineNon-compliance with DPA request

Network connection structure. Data transfer. Abstract background with interweaving of dots and lines. 3D

The Romanian DPA sanctions one of Bucharest’s districts for failing to respond to the requests and for failing to implement the measures ordered by an action plan

Tags:Corrective measuresData breachDPADPA investigationGDPR fineSecurity of processingUpdate

Blockchain technology background. Cryptocurrency fintech block chain network and programming concept.

Romanian DPA sanctions controller for breach of security of processing

Tags:Banking sectorCorrective measuresCross-borderDPADPA investigationGDPR fineGDPR principles

Cyber security safe encrypted digital data networks for secure global information technology - Conceptual 3D illustration rendering

The Romanian DPA takes action against the Romanian branch of a Polish bank for sending unsolicited communications

Tags:Corrective measuresData breachData subject's rightsDPADPA investigationGDPR fineRight of access

AdobeStock_248475500 Green Blue-01

The Romanian DPA fines online lending platform EUR 24,000 for GDPR violations: No security measures, data breach notification, nor response to a data subject’s request

Tags:CookiesCorrective measuresDPADPA fineDPA investigationePrivacy DirectiveFitness Industry

Cybersecurity and digital data protection technology concept background image. Small padlock binary polygons that act as interconnects. dark blue background.

e-Privacy and GDPR non-compliance: Romanian DPA fines a fitness company EUR 2,000 and issues two reprimands

Tags:Banking sectorCorrective measuresDPADPA investigationGDPR fineRight of accessUpdate

AdobeStock_274379986

The Romanian DPA fines a controller in the banking sector EUR 1,500 for failure to implement the previously imposed corrective measure on handling an access request

Tags:Corrective measuresData subject's rightsDPADPA investigationEmployee dataFailure to provide requested informationNon-compliance with DPA request

AdobeStock_248475500 Green Blue-01

Local authority fined approx. EUR 2,000 by the Romanian DPA for several GDPR violations in the context of video surveillance

1 2 3 … 6

Statistics