Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-20.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
24 Apr 2023Tensa Art Design SAThe National Supervisory Authority completed an investigation in March 2023 at Tensa Art Design SA and found violations of GDPR provisions. As a result, the company was fined 1,000 EUR.ROANSPDCPGDPR€1,000
25 Nov 2022OTP LEASING ROMANIA IFN SAOTP LEASING ROMANIA IFN SA was fined by ANSPDCP for breaching data security provisions. The penalty followed a data breach notification indicating that personal data had not been adequately protected.ROANSPDCPGDPR€3,000
09 Aug 2022SC Wabag Water Services SRLIn June 2022, ANSPDCP completed an investigation at SC Wabag Water Services SRL and found a breach of GDPR provisions. As a result, a fine of EUR 1,000 was imposed.ROANSPDCPGDPR€1,000
12 Nov 2025Fan Courier Express S.R.L.Fan Courier Express S.R.L. was fined by ANSPDCP in the amount of €3,000 for processing personal data in breach of GDPR. The case concerned unlawful handling of personal data by the company.ROANSPDCPGDPR€3,000
28 Apr 2026CROWD ENTERTAINMENT LIMITEDCROWD ENTERTAINMENT LIMITED was fined EUR 20,000 by the Romanian authority ANSPDCP. The sanction concerned violations of GDPR requirements.ROANSPDCPGDPR€20,000
22 May 2025Dumitru Viorel FocșaThe National Supervisory Authority for Personal Data Processing imposed a fine on Dumitru Viorel Focșa for GDPR violations. The case followed a complaint from a data subject.ROANSPDCPGDPR€1,000
14 Oct 2025CORAL TRAVEL & TOURISM SERVICES S.R.L.The operator was fined for violating GDPR provisions. The case concerned non-compliance with personal data protection requirements.ROANSPDCPGDPR€982
09 Nov 2022SC Das Sense Society SRLSC Das Sense Society SRL was fined EUR 1,000 by ANSPDCP. The authority found a GDPR breach for failing to provide the requested information.ROANSPDCPGDPR€1,000
19 May 2025Maravet S.R.L.The National Supervisory Authority for Personal Data Processing completed an investigation at Maravet S.R.L. and found a violation of GDPR provisions. The operator was fined EUR 5,000.ROANSPDCPGDPR€5,000
12 Nov 2025Fan Courier Express S.R.L.Fan Courier Express S.R.L. was fined by ANSPDCP in the amount of €1,000 for processing personal data in violation of GDPR. The case concerned unlawful processing of personal data.ROANSPDCPGDPR€1,000
16 Oct 2024Your Consulting SRLThe national supervisory authority completed an investigation into Your Consulting SRL and found violations of GDPR provisions. As a result, a fine of EUR 3,000 was imposed.ROANSPDCPGDPR€3,000
01 Nov 2021IKEA ROMÂNIA SAIKEA ROMÂNIA SA was fined EUR 1,000 by ANSPDCP for compromising data confidentiality. The case concerned processing practices that were not compliant with GDPR and could affect data subjects’ rights.ROANSPDCPGDPR€1,000
29 May 2026Unicredit Bank SAUnicredit Bank SA was fined EUR 2,000 by ANSPDCP. The authority found that the bank failed to notify a personal data breach within the required 72-hour deadline.ROANSPDCPGDPR€2,000
01 May 2025SC Piramida Trade Invest SRLThe Romanian DPA ANSPDCP imposed a total fine of EUR 3,000 on SC Piramida Trade Invest SRL for unlawful audio-video monitoring of employees and inadequate staff information. It also found that the company failed to respond to access, erasure, and objection requests within the legal deadline; a separate email-forwarding issue resulted only in a warning.ROAutoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter PersonalGDPR€3,000
16 May 2025ACCOUNTING & AUDIT CONSULTING SRLACCOUNTING & AUDIT CONSULTING SRL was fined by ANSPDCP €5,000 for GDPR violations. The investigation was completed in April 2025, and the decision was issued on 16 May 2025.ROANSPDCPGDPR€5,000
06 Mar 2024Sectorul 1 al Municipiului BucureștiSectorul 1 of Bucharest was fined 159,000 RON by ANSPDCP for failing to comply with a remediation measure. The authority had required the requested information to be provided within 10 days, but the obligation was not met.ROANSPDCPGDPR€31,988
30 Jan 2026deținătorul site-ului evita-teparii.roANSPDCP imposed total fines of 51,000 lei, about 10,000 euro, on the operator, a natural person who runs the site evita-teparii.ro. The case involved multiple GDPR breaches, including the unlawful publication of identity, contact, sensitive, and alleged criminal data without a legal basis.ROANSPDCPGDPR€10,007
13 Oct 2025Vellea Home SRLIn September 2025, the National Supervisory Authority for Personal Data Processing completed an investigation at Vellea Home SRL and found violations of GDPR provisions. The operator was fined EUR 5,000.ROANSPDCPGDPR€5,000
18 May 2022Kredyt Inkaso Investments RO S.A.The company unlawfully processed personal data by disclosing it excessively, including health data. The authority found a breach of personal data processing principles.ROANSPDCPGDPR€5,000
27 Jun 2025YDAIL CONSTRUCT SRLANSPDCP completed an investigation at YDAIL CONSTRUCT SRL in June 2025 and found a violation of applicable legal provisions. As a result, the company was fined 20,000 RON.ROANSPDCPGDPR€3,936