BULLETIN №081Last updated · 26 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 18 Sept 2025 | Dr.Max SRLIn August of the current year, ANSPDCP completed an investigation at Dr.Max SRL and found a breach of GDPR provisions. As a result, the operator was fined EUR 1,000. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 03 Jun 2022 | Kaufland România SCSKaufland România SCS was fined EUR 2,000 by ANSPDCP for failing to follow internal complaint procedures. This allowed a security guard to improperly access and misuse personal data, resulting in a breach of data confidentiality. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 25 Oct 2024 | IA BILET SRLThe operator was fined EUR 1,000 by ANSPDCP for violating GDPR provisions. The case concerns non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 20 Mar 2026 | Domeniul Public și Privat SADomeniul Public și Privat SA was fined EUR 1,000 for breaching Article 15 of the GDPR. The case concerned improper handling of data subject access rights. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 12 May 2022 | LORIS FUEL SHOP SRLLORIS FUEL SHOP SRL was fined EUR 1,000 by ANSPDCP for breaches of GDPR rules on data processing and security measures. The case indicates compliance gaps in personal data protection controls. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 04 Nov 2024 | Blackcab Systems SRLANSPDCP completed an investigation at Blackcab Systems SRL in October 2024 and found a breach of GDPR provisions. As a result, a fine of EUR 1,000 was imposed. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 16 Jun 2026 | Dormeo Home SRLANSPDCP completed an investigation at Dormeo Home SRL in May 2026 and found a breach of GDPR provisions. As a result, a fine of EUR 1,000 was imposed. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 03 Apr 2026 | BLUE PROJECTS S.R.L.In March 2026, the Romanian supervisory authority ANSPDCP completed an investigation into BLUE PROJECTS S.R.L. and found a GDPR violation. The company was fined EUR 2,500. | RO | ANSPDCP | GDPR | €2,500 | ↗ |
| 16 Jun 2025 | SC Kashto Concept SRLANSPDCP completed an investigation at SC Kashto Concept SRL and found a breach of the GDPR. The operator was fined 5,000 RON. | RO | ANSPDCP | GDPR | €995 | ↗ |
| 18 Jan 2023 | Dante Internațional SAIn December 2022, ANSPDCP completed an investigation into Dante Internațional SA and found violations of GDPR provisions. As a result, a fine of EUR 1,000 was imposed. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 03 Mar 2025 | BEKO ROMÂNIA SAIn February 2025, ANSPDCP completed an investigation at BEKO ROMÂNIA SA and found violations of GDPR provisions. As a result, the controller was fined EUR 10,000. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 09 Sept 2022 | SC Raiffeisen Bank SASC Raiffeisen Bank SA was fined by ANSPDCP in the amount of EUR 2,000 for violating Article 5 of the GDPR. The case concerned non-compliance with the basic principles for processing personal data set out in that provision. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 26 Jun 2025 | SC Piramida Trade Invest SRLSC Piramida Trade Invest SRL was fined EUR 2,000 by ANSPDCP. The case concerned a violation of Article 21 of the GDPR, which governs the right to object to data processing. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 08 May 2024 | Genpact România SRLThe ANSPDCP imposed a fine of EUR 3,000 on Genpact România SRL. The sanction concerned sending a file containing recruitment data to an unauthorized employee email address. The incident indicates a failure to control access to personal data and maintain confidentiality. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 01 Apr 2025 | BitdefenderBitdefender received a GDPR fine of EUR 10,000 from the Romanian data protection authority. The sanction followed an investigation completed in April 2025 after a data breach notification, with the authority citing inadequate technical and organizational security measures. | RO | Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal | — | €10,000 | ↗ |
| 27 Feb 2025 | Velvet Medical SRLThe National Supervisory Authority for Personal Data Processing completed an investigation in February into Velvet Medical SRL. It found a GDPR violation and imposed a fine of 1,000 EUR. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 28 Apr 2026 | CROWD ENTERTAINMENT LIMITEDCROWD ENTERTAINMENT LIMITED was fined EUR 15,000 by ANSPDCP for GDPR violations. The case concerned non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €15,000 | ↗ |
| 11 Apr 2025 | NEW GAMBLING SOLUTIONS S.R.L.In March 2025, ANSPDCP completed an investigation into NEW GAMBLING SOLUTIONS S.R.L. and found a GDPR violation. The company was fined EUR 2,000. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 30 Jul 2021 | Amendă pentru încălcarea RGPDA fine of EUR 100 was imposed on an individual by ANSPDCP for violating GDPR requirements. The case concerned a confirmed breach of personal data protection obligations. | RO | ANSPDCP | GDPR | €100 | ↗ |
| 29 Aug 2022 | Alpha Bank România SAAlpha Bank România SA was fined EUR 1,000 by ANSPDCP for a data security breach. A document was mistakenly sent to the wrong recipient via WhatsApp. | RO | ANSPDCP | GDPR | €1,000 | ↗ |