BULLETIN №081Last updated · 26 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 30 Jan 2026 | un operator persoană fizicăAn individual operator was fined 1,000 EUR by ANSPDCP for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 13 Jan 2026 | PREMIER RESTAURANTS ROMANIA SRLThe National Supervisory Authority for Personal Data Processing imposed a fine on PREMIER RESTAURANTS ROMANIA SRL for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €8,000 | ↗ |
| 06 Mar 2023 | Integral Collection SRLIntegral Collection SRL was fined EUR 3,000 by ANSPDCP after a ransomware incident. The attack led to unauthorized access and loss of integrity and availability of personal data. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 15 Dec 2022 | Societatea Energetică Electrica S.A.In November 2022, ANSPDCP completed an investigation at Societatea Energetică Electrica S.A. and found a GDPR violation. The operator was fined 5,000 EUR and advised to take all necessary measures to comply with the rules. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 11 May 2023 | Libra Internet Bank SALibra Internet Bank SA was fined EUR 1,000 by ANSPDCP. The sanction relates to a breach of GDPR provisions. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 26 Feb 2024 | VESTAS CEU ROMÂNIA SRLThe company was fined EUR 3,000 by ANSPDCP for unauthorized disclosure of personal data. The breach included names, place of residence, salary, and CV details. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 15 Apr 2025 | United Business Solutions SRLANSPDCP completed an investigation at United Business Solutions SRL and found a violation of GDPR provisions. As a result, a fine of EUR 2,000 was imposed. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 07 Feb 2024 | Account Exchange SRLAccount Exchange SRL was fined EUR 2,000 by ANSPDCP for violating GDPR provisions related to data processing. The case concerned non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 18 Aug 2025 | SC Elite Conta SRLThe National Supervisory Authority for Personal Data Processing completed an investigation in July 2025 at SC Elite Conta SRL and found a GDPR violation. The company was fined for failing to properly notify a personal data security breach. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 20 Mar 2026 | Domeniul Public și Privat SADomeniul Public și Privat SA was fined 2,000 EUR by ANSPDCP for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 13 Mar 2023 | Modaone SRLModaone SRL was fined by ANSPDCP EUR 2,000 for sending commercial emails to a data subject after the person had objected. The authority found a breach of the GDPR right to object. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 16 May 2023 | Compania Națională Poșta Română S.A.Compania Națională Poșta Română S.A. was fined EUR 5,000 by ANSPDCP for GDPR violations related to the completion of Form 230. The case arose from complaints, and the authority instructed the company to ensure personal data processing complies with processing principles. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 30 Jan 2026 | un operator persoană fizicăA 1,000 EUR fine was imposed on an individual operator for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 27 Dec 2022 | Kaufland România SCSKaufland România SCS was fined by ANSPDCP EUR 3,000 for GDPR violations. The investigation was completed in November 2022. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 17 May 2022 | MAYR MELNHOF PACKAGING ROMANIA S.R.L.The company was fined by ANSPDCP for processing images in a manner that was not adequate, relevant, or limited to what was necessary for the stated purpose. The authority found a breach of the data minimization principle. | RO | ANSPDCP | GDPR | €1,500 | ↗ |
| 10 Sept 2024 | Fundația Pro Economica – Pro Economica AlapítványThe foundation was fined EUR 1,000 by ANSPDCP after a data security incident caused by a cyberattack. The attack led to the deletion of personal data from its server, affecting data availability. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 22 Aug 2024 | Kaufland România SCSKaufland România SCS was fined EUR 2,000 by ANSPDCP for a data security breach. The case concerns an incident affecting data protection and resulted in an administrative sanction. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 14 Mar 2023 | Tinmar Energy SATinmar Energy SA was fined EUR 3,000 by ANSPDCP after unauthorized access to its email server. The incident resulted in a personal data breach. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 09 May 2024 | MEDICOVER SRLMEDICOVER SRL was fined EUR 1,000 by ANSPDCP for the unauthorized disclosure of personal data from a medical consultation report to an unintended patient. The case concerns a breach of confidentiality involving special-category data and indicates a need to strengthen access controls and recipient verification procedures. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 22 Feb 2022 | Societatea Civilă Profesională de Avocați „Sabou, Burz & Cuc”The law firm Societatea Civilă Profesională de Avocați „Sabou, Burz & Cuc” was fined by ANSPDCP for violating GDPR provisions. The penalty amounted to EUR 1,000. | RO | ANSPDCP | GDPR | €1,000 | ↗ |