BULLETIN №084Last updated · 12 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 17 Jan 2025 | DELIVERY SOLUTIONS S.A.The company was fined for failing to implement adequate technical and organizational measures to ensure a level of security appropriate to the risk. The authority also found insufficient safeguards to ensure data confidentiality. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 20 Dec 2024 | English Home SRLEnglish Home SRL was fined EUR 1,000 by ANSPDCP for violating Article 21 of the GDPR. The case concerned failure to respect the data subject’s right to object to processing. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 24 May 2022 | MEDLIFE S.A.In April 2022, ANSPDCP completed an investigation into MEDLIFE S.A. and found a breach of GDPR provisions. As a result, a fine of EUR 5,000 was imposed. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 21 Jun 2023 | Vodafone România SAVodafone România SA was fined €1,000 by ANSPDCP. The authority found that the company violated the complainant’s right of access by refusing to provide certain call center recordings. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 08 Jan 2026 | Amendă pentru încălcarea Legii nr. 506/2004 și a RGPDA fine of EUR 2,000 was imposed for violations of certain provisions of Law No. 506/2004 and the GDPR. The case concerns non-compliant personal data processing and privacy protection obligations. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 25 Aug 2021 | Amendă în aplicarea Legii nr. 190/2018The operator was fined for failing to respond to the authority's requests during an investigation. The case concerns non-cooperation with ANSPDCP in the course of supervisory proceedings. | RO | ANSPDCP | GDPR | €2,029 | ↗ |
| 13 May 2025 | Romoffice Construct Holding Ag SRLThe company was fined by ANSPDCP €2,000 for processing personal data without a legal basis. The breach concerned the principles of lawfulness, fairness, and transparency. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 18 Oct 2022 | a natural personA natural person was fined EUR 150 by ANSPDCP for violating the General Data Protection Regulation. The case concerned a breach of GDPR requirements. | RO | ANSPDCP | GDPR | €150 | ↗ |
| 25 Oct 2024 | IA BILET SRLThe operator was fined EUR 1,000 by ANSPDCP for violating GDPR provisions. The case concerns non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 01 Feb 2025 | Automobilus International S.R.L.The Romanian data protection authority fined Automobilus International S.R.L. 24,885 RON after concluding its investigation in February 2025. It found breaches of GDPR Articles 32(1) and 32(2) due to inadequate technical and organizational security measures following a personal data breach. | RO | Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal | GDPR | €5,000 | ↗ |
| 22 Dec 2022 | SUDREZIDENȚIAL Broker S.R.L.The company was fined for failing to inform data subjects about a personal data breach. The authority found a violation of Article 34 of the GDPR. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 18 May 2023 | AUTOMOBILE BAVARIA SRLThe fine was imposed for the unauthorized disclosure of personal data of 290 clients and potential clients, which were publicly accessible on the operator's website. The case concerns a breach of data protection rules through disclosure without an appropriate legal basis or safeguards. | RO | ANSPDCP | GDPR | €18,000 | ↗ |
| 23 Dec 2024 | Fan Courier Express S.R.L.Fan Courier Express S.R.L. was fined €2,000 by ANSPDCP for breaching Article 3 of the GDPR. The case concerned non-compliance with the rules on the regulation’s scope of application. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 16 Mar 2023 | Sancțiuni pentru încălcarea RGPDA healthcare operator was fined for unauthorized disclosure and access to personal data. The case concerned data confidentiality and breaches of GDPR obligations. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 04 Apr 2023 | Tensa Art Design SRLThe company was fined for sending commercial messages to individuals by phone and email despite their requests to stop contact. The case concerned failure to respect opt-out requests against further marketing communication. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 20 Jun 2023 | Dante International SADante International SA was fined EUR 30,000 by the Romanian authority ANSPDCP. The sanction concerned violations linked to complaints filed by three individuals from Hungary. | RO | ANSPDCP | GDPR | €30,000 | ↗ |
| 09 Jun 2021 | S.C.The operator was fined by ANSPDCP for failing to provide requested information to the supervisory authority. This constituted a breach of GDPR requirements. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 21 Mar 2025 | Bucharest Down Town Hotel SRLThe National Supervisory Authority for Personal Data Processing fined Bucharest Down Town Hotel SRL for GDPR violations following a complaint. The case concerned non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 03 Jan 2023 | Asociație de proprietari din IașiA homeowners' association in Iași was fined 500 EUR by ANSPDCP for GDPR violations. The case concerned failure to comply with personal data protection requirements as a controller. | RO | ANSPDCP | GDPR | €500 | ↗ |
| 23 Aug 2023 | BODY LINE SRLIn July 2023, the Romanian authority ANSPDCP completed an investigation at BODY LINE SRL and found violations of GDPR provisions. The operator was fined 49,322 lei, equivalent to EUR 10,000. | RO | ANSPDCP | GDPR | €10,000 | ↗ |