BULLETIN №081Last updated · 26 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 25 Oct 2024 | IA BILET SRLThe operator was fined EUR 1,000 by ANSPDCP for violating GDPR provisions. The case concerns non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 01 Feb 2025 | Automobilus International S.R.L.The Romanian data protection authority fined Automobilus International S.R.L. 24,885 RON after concluding its investigation in February 2025. It found breaches of GDPR Articles 32(1) and 32(2) due to inadequate technical and organizational security measures following a personal data breach. | RO | Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal | GDPR | €5,000 | ↗ |
| 22 Dec 2022 | SUDREZIDENȚIAL Broker S.R.L.The company was fined for failing to inform data subjects about a personal data breach. The authority found a violation of Article 34 of the GDPR. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 18 May 2023 | AUTOMOBILE BAVARIA SRLThe fine was imposed for the unauthorized disclosure of personal data of 290 clients and potential clients, which were publicly accessible on the operator's website. The case concerns a breach of data protection rules through disclosure without an appropriate legal basis or safeguards. | RO | ANSPDCP | GDPR | €18,000 | ↗ |
| 23 Dec 2024 | Fan Courier Express S.R.L.Fan Courier Express S.R.L. was fined €2,000 by ANSPDCP for breaching Article 3 of the GDPR. The case concerned non-compliance with the rules on the regulation’s scope of application. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 16 Mar 2023 | Sancțiuni pentru încălcarea RGPDA healthcare operator was fined for unauthorized disclosure and access to personal data. The case concerned data confidentiality and breaches of GDPR obligations. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 04 Apr 2023 | Tensa Art Design SRLThe company was fined for sending commercial messages to individuals by phone and email despite their requests to stop contact. The case concerned failure to respect opt-out requests against further marketing communication. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 20 Jun 2023 | Dante International SADante International SA was fined EUR 30,000 by the Romanian authority ANSPDCP. The sanction concerned violations linked to complaints filed by three individuals from Hungary. | RO | ANSPDCP | GDPR | €30,000 | ↗ |
| 09 Jun 2021 | S.C.The operator was fined by ANSPDCP for failing to provide requested information to the supervisory authority. This constituted a breach of GDPR requirements. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 21 Mar 2025 | Bucharest Down Town Hotel SRLThe National Supervisory Authority for Personal Data Processing fined Bucharest Down Town Hotel SRL for GDPR violations following a complaint. The case concerned non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 03 Jan 2023 | Asociație de proprietari din IașiA homeowners' association in Iași was fined 500 EUR by ANSPDCP for GDPR violations. The case concerned failure to comply with personal data protection requirements as a controller. | RO | ANSPDCP | GDPR | €500 | ↗ |
| 23 Aug 2023 | BODY LINE SRLIn July 2023, the Romanian authority ANSPDCP completed an investigation at BODY LINE SRL and found violations of GDPR provisions. The operator was fined 49,322 lei, equivalent to EUR 10,000. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 16 Nov 2022 | Raiffeisen Bank SARaiffeisen Bank SA was fined by ANSPDCP EUR 20,000 for GDPR violations related to data security incidents. The case concerned shortcomings in the protection of personal data and security requirements. The decision highlights the need for effective technical and organizational controls. | RO | ANSPDCP | GDPR | €20,000 | ↗ |
| 10 Dec 2024 | un operatorANSPDCP imposed a fine of 10,000 RON on un operator for non-compliance with the law. A warning was also issued. | RO | ANSPDCP | GDPR | €2,012 | ↗ |
| 15 Mar 2023 | Alianța pentru Unirea RomânilorThe fine was imposed for collecting personal data through a website without informing the data subjects and without meeting the conditions for lawful processing. The breach affected a significant number of individuals and indicates non-compliance with basic transparency and legality requirements. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 07 Jul 2022 | E Software Concept SRLE Software Concept SRL was fined EUR 1,000 by ANSPDCP. The sanction was imposed for failing to provide requested information to the supervisory authority. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 08 Dec 2025 | Compania de Apă Oltenia S.A.The company was fined EUR 1,000 by ANSPDCP after an employee disclosed personal data on a social network. The case was initiated following a complaint from the data subject. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 18 Oct 2022 | SC Materiale Constructii Online SRLSC Materiale Constructii Online SRL was fined by ANSPDCP in the amount of EUR 2,000 for violating the General Data Protection Regulation (GDPR). The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| — | Lensa.roLensa.ro, operated by Tensa Art Design, was fined EUR 20,000 by Romania’s data protection authority, ANSPDCP. The case involved cookie-based tracking and behavioral advertising without clear user consent, as well as failure to respond to the authority’s official information requests. | RO | Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal | GDPR | €20,000 | ↗ |
| 20 Dec 2022 | Autoritatea Națională pentru Restituirea Proprietăților (ANRP)The National Authority for Property Restitution (ANRP) was fined 13,000 RON by ANSPDCP for violating GDPR provisions. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €2,646 | ↗ |