312 GDPR fines

Enforcement decisions from 21 jurisdictions, reported by INPLP member firms. Each entry links to the authority’s own publication where one is on record.

• Megareduceri TV SRL

  Romania·2020-10-01

  3,000 EUR
  Art. 83Failure to implement the corrective measure

• Sanatatea Press Group SRL

  Romania·2020-09-08

  2,000 EUR
  Art. 1Breach of the security measures imposed by GDPR

• Owners association Navodari

  Romania·2020-09-01

  500 EUR
  Art. 5Art. 6Art. 83Illegal processing of personal data

• Compania Nationala Posta Romana

  Romania·2020-07-30

  2,000 EUR
  Art. 32Lack of appropriate organisational and technical measures

• Proleasing Motors SRL

  Romania·2020-07-09

  15,000 EUR
  Art. 32Lack of appropriate organisational and technical measures

• Enel Energie Muntenia SA

  Romania·2020-06-18

  4,000 EUR
  Art. 32Lack of appropriate organisational and technical measures

• Estee Lauder Romania SRL

  Romania·2020-06-11

  3,000 EUR
  Lack of legals basis for data processing

• Telekom Romania Communications SA

  Romania·2020-06-11

  3,000 EUR
  Art. 32Lack of appropriate organisational and technical measures

• Banca Comerciala Romana SA

  Romania·2020-05-05

  5,000 EUR
  Art. 32Lack of appropriate organisational and technical measures

• "SOS Infertilitatea" Association

  Romania·2020-03-25

  2,000 EUR
  Art. 58Non-cooperation with supervisory authority

• Dante International S.A. (owner of e-MAG.ro)

  Romania·2020-03-25

  3,000 EUR
  Art. 6Art. 21Non-compliance with lawful basis for data processing, non-observance of the data subject's right to object

• Vodafone Romania S.A.

  Romania·2020-03-18

  3,000 EUR
  Art. 5Art. 32Infringement of data accuracy and confidentiality principles

• Entirely Shipping&Trading S.R.L.

  Romania·2020-01-16

  5,000 EUR
  Art. 5Breach of the controller's obligation to inform data subjects Breach of the principles governing the processing of personal data Lack of legal basis for the processing of data Failure to comply with the conditions for consent

• Enel Energie S.A.

  Romania·2020-01-14

  3,000 EUR
  Art. 5Art. 21Infrigement of data accuracy principle Lack of legal basis for data processing Non-observance of the data subject's right to object

• Hora Credit IFN S.A.

  Romania·2020-01-13

  10,000 EUR
  Art. 5Breach of data accuracy and confidentiality principles; Inssuficient organisational and technical measures; Failure to comply with the deadline to notify the personal data breach to the supervisory authority

• Homeowners Association

  Romania·2019-12-23

  500 EUR
  Art. 32Lack of adeqaute organisational and technical measures

• Globus Score S.R.L.

  Romania·2019-12-16

  2,000 EUR
  Art. 83Art. 58Lack of cooperation with Romanian Data Protection Authority

• Modern Barber S.R.L.

  Romania·2019-12-13

  3,000 EUR
  Art. 83Art. 58Lack of cooperation with Romanian Data Protection Authority

• Nicola Medical Team 17 S.R.L.

  Romania·2019-12-13

  2,000 EUR
  Art. 83Art. 58Lack of cooperation with Romanian Data Protection Authority

• Royal President S.R.L.

  Romania·2019-11-29

  2,500 EUR
  Art. 12Art. 15Art. 5Art. 32Lack of adeqaute organisational and technical measures

• SC CNTAR TAROM S.A.

  Romania·2019-11-29

  20,000 EUR
  Art. 32Lack of suitable organisational and technical measures

• ING Bank N.V. Amsterdam - Bucharest Subsidiary

  Romania·2019-11-25

  80,000 EUR
  Art. 25Art. 5Art. 32Lack of required organisational and technical measures

• FAN COURIER EXPRESS S.R.L.

  Romania·2019-10-25

  11,000 EUR
  Art. 32Art. 5Lack of required organisational and technical measures

• BNP Paribas Personal Finance SA Paris Bucharest Subsidiary (CETELEM IFN S.A.)

  Romania·2019-10-22

  2,000 EUR
  Art. 12Failure to comply with the deadline for responding to the request of data subject

• INTELIGO MEDIA SA

  Romania·2019-10-15

  9,000 EUR
  Art. 5Art. 6Art. 7Inadequate legal basis for data processing

• Raiffeisen Bank SA

  Romania·2019-10-09

  150,000 EUR
  Art. 32Lack of required organisational and technical measures

• Vreau Credit SRL

  Romania·2019-10-09

  20,000 EUR
  Lack of appropriate organisational and technical measures

• UTTIS INDUSTRIES S.R.L.

  Romania·2019-08-06

  2,500 EUR
  Art. 12Art. 5Art. 6failure to comply with the obligation to provide transparent information and the principle of data minimisation

• LEGAL COMPANY & TAX HUB S.R.L.

  Romania·2019-07-12

  3,000 EUR
  Art. 32Lack of suitable organisational and technical measures

• WORLD TRADE CENTER BUCHAREST S.A.

  Romania·2019-07-08

  15,000 EUR
  Art. 32Lack of required organisational and technical measures

• UNICREDIT BANK S.A.

  Romania·2019-07-04

  130,000 EUR
  Art. 25Art. 5Lack of appropriate organisational and technical measures

• CNTAR TAROM SA

  Romania

  5,000 EUR
  Art. 32Lack of appropriate organisational and technical measures

• S.C. C&V Water Control S.A.

  Romania

  2,000 EUR
  Art. 83Art. 58Non-cooperation with the supervisory authority

• ING Bank N.V. Amsterdam - Bucharest Subsidiary

  Romania

  3,000 EUR
  Art. 5Art. 6Infringement of transparency, purpose limitation, data minimisation and accuracy principles, Lack of legal basis for data processing

• ING Bank N.V. Amsterdam - Bucharest Subsidiary

  Romania

  1,000 EUR
  Art. 29Art. 32Insufficient organisational and technical measures

• Natural person

  Romania

  200 EUR
  Art. 5Art. 6Art. 13Art. 32Non-observance of the transparency and purpose limitation principles regarding data processing

• Association of apartment owners

  Romania

  500 EUR
  Art. 83Art. 58Non-cooperation with the supervisory authority

• Megareduceri TV S.R.L.

  Romania

  3,000 EUR
  Art. 83Art. 58Non-cooperation with the supervisory authority

• S.C. Viva Credit IFN S.A.

  Romania

  2,000 EUR
  Art. 12Art. 17Failure to respond within the legal deadline to the request of data subject regarding the right "to be forgotten"

• Romanian Post National Company

  Romania

  2,000 EUR
  Art. 32Lack of appropriate organisational and technical measures

• Association of apartment owners - FC5 Building, Navodari city, Constanta county

  Romania

  500 EUR
  Art. 5Art. 6Art. 25Art. 83Non-observance of data processing principles and of the data subject's right to information on his/her personal data processed by the controller, Non-compliance with lawful basis for data processing

• Sanatatea Press Group S.R.L.

  Romania

  2,000 EUR
  Art. 5Art. 32Infringement of data integrity and confidentiality principle, Insufficient organisational and technical measures

• Association of apartment owners Militari R, Chiajna village

  Romania

  2,000 EUR
  Art. 83Art. 58Non-cooperation with the supervisory authority

• S.C. Marsorom S.R.L.

  Romania

  3,000 EUR
  Insufficient organisational and technical measures

• Globus Score SRL

  Romania

  2,000 EUR
  Art. 83Art. 58Non-cooperation with the supervisory authority

• Vodafone România S.A.

  Romania

  4,000 EUR
  Non-observance of the data subject's right of access and right to erasure, Failure of the controller to prove that it has responded within the legal deadline to the request of data subject

• DADA CREATION S.R.L.

  Romania

  5,000 EUR
  Art. 32Art. 33Lack of organisational and technical measures, Failure to notify the data breach to the supervisory authority

• Banca Transilvania SA

  Romania

  100,000 EUR
  Art. 32Art. 5Insufficient organisational and technical measures, Infringement of data integrity and confidentiality principle

• Administrative-Territorial Unit 4th District of Bucharest

  Romania

  N/A
  Art. 5Art. 6Infringement of lawfulness, fairness and transparency principle, Lack of legal ground for data processing

• Cluj-Napoca Municipality

  Romania

  N/A
  Art. 5Art. 6Infringement of lawfulness, fairness and transparency principle, Lack of legal ground for data processing

• Qualitance QBS SA

  Romania

  1,000 EUR
  Art. 32Insufficient organisational and technical measures

• Natural person acting as a General Secretary for a political party in Bucharest

  Romania

  500 EUR
  Art. 32Art. 58Lack of appropriate organisational and technical measures

• S.C. Medicover S.R.L.

  Romania

  2,000 EUR
  Art. 32Lack of appropriate organisational and technical measures

• TELEKOM ROMÂNIA MOBILE COMMUNICATIONS S.A.

  Romania

  10,000 EUR
  Art. 32Lack of appropriate organisational and technical measures

• S.C. TIP TOP FOOD INDUSTRY S.R.L.

  Romania

  5,000 EUR
  Art. 5Art. 6Art. 7Infringement of purpose limitation and accuracy principles regarding the processing of personal data, Lack of legal basis for data processing, Non-observance of the conditions for consent

• Lugera & Makler Broker S.R.L.

  Romania

  1,500 EUR
  Art. 29Art. 32Insufficient organisational and technical measures

• World Class România S.A.

  Romania

  2,000 EUR
  Art. 32Insufficient organisational and technical measures

• Telekom Romania Communications S.A.

  Romania

  2,000 EUR
  Art. 6Art. 21Lack of legal basis for data processing, Non-observance of the right to object of data subject

• Banca Comercială Română S.A.

  Romania

  2,000 EUR
  Art. 5Art. 6Non-observance of the transparency and accuracy principles regarding data processing, Lack of legal basis for data processing

• Vodafone România S.A.

  Romania

  5,000 EUR
  Art. 32Lack of appropriate organisational and technical measures

• SC Dreamtime Call S.R.L.

  Romania

  2,000 EUR
  Art. 83Non-cooperation with the supervisory authority