BULLETIN №081Last updated · 26 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 24 Oct 2023 | Mensajero SRLMensajero SRL was fined EUR 3,000 by ANSPDCP for a data security breach on its website. A link allowed access to downloadable files containing customer invoices and product warranty certificates. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 28 Oct 2024 | Vodafone România S.A.Vodafone România S.A. was fined by ANSPDCP EUR 5,000 for the unauthorized disclosure of email addresses. The breach resulted from failing to use the “BCC” option, which exposed recipients’ data and violated GDPR obligations. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 09 Dec 2022 | Casa Rusu S.R.L.The company was fined for a data security breach on its online payment section. An unauthorized form was introduced there and collected customers’ card data. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 13 Jan 2025 | Centrul Medical Unirea S.R.L.The National Supervisory Authority for Personal Data Processing completed an investigation at Centrul Medical Unirea S.R.L. and found a breach of Article 32 of the GDPR. A fine of EUR 2,000 was imposed. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 18 Nov 2022 | Asociația de Proprietari Bld. Pipera 1-2EThe association was fined for failing to provide requested information within the legal deadline. The case concerns a breach of the duty to cooperate with the supervisory authority. | RO | ANSPDCP | GDPR | €300 | ↗ |
| 12 Aug 2025 | Asociația Casa de Ajutor Reciproc „FLEXICREDIT”In June 2025, ANSPDCP completed an investigation at Asociația Casa de Ajutor Reciproc „FLEXICREDIT” and found violations of GDPR provisions. The entity was fined EUR 3,000. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 31 Jan 2023 | Dent Estet Clinic SADent Estet Clinic SA was fined by ANSPDCP EUR 1,000 for breaches of the transparency obligations under GDPR Articles 12–14. The case concerned inadequate compliance with information duties toward data subjects. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 08 Sept 2020 | Sanatatea Press Group S.R.L.Sanatatea Press Group S.R.L. was fined EUR 2,000 by ANSPDCP for a data security breach during an online event. Login details were mistakenly sent to incorrect email addresses, resulting in disclosure of information to unauthorized recipients. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 06 Dec 2021 | Telekom România Communications SAANSPDCP completed an investigation into Telekom România Communications SA in November 2021 and imposed a fine for GDPR violations. The case concerned deficiencies identified during the supervisory authority’s review. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 01 Dec 2024 | Orange România SAThe Romanian data protection authority completed an investigation in December 2024 into Orange România SA and found a breach of Article 12(3) GDPR. The case concerned failure to meet the deadline for responding to a data subject access request, resulting in a EUR 40,000 fine. | RO | Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal | GDPR | €40,000 | ↗ |
| 01 Sept 2025 | La Fântâna S.R.L.In July 2025, ANSPDCP completed an investigation into La Fântâna S.R.L. and found a breach of GDPR provisions. As a result, the operator was fined 10,000 EUR. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 04 Feb 2025 | V&M Contab&Management SRLANSPDCP imposed a fine of EUR 2,000 on V&M Contab&Management SRL for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 23 May 2023 | Global Baby Brands SRLIn May 2023, the Romanian supervisory authority ANSPDCP completed an investigation into Global Baby Brands SRL. It found a GDPR violation and imposed a fine of EUR 1,000. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 04 Feb 2025 | V&M Contab&Management SRLANSPDCP imposed a fine of EUR 8,000 on V&M Contab&Management SRL for GDPR violations. The case concerns non-compliance with personal data protection requirements, creating regulatory risk for the controller. | RO | ANSPDCP | GDPR | €8,000 | ↗ |
| 20 Jun 2022 | Asociația de Proprietari Aviației ParkAsociația de Proprietari Aviației Park was fined EUR 5,000 by ANSPDCP for violating GDPR provisions. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 31 Aug 2023 | operator persoană fizicăA EUR 2,000 fine was imposed on an individual operator for photographing or filming a patient in a medical unit without consent. The authority also applied a corrective measure to ensure compliance of data processing operations with the GDPR. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 26 Nov 2025 | Cucina di Fabio S.R.L.ANSPDCP imposed a fine of EUR 1,000 on Cucina di Fabio S.R.L. for a GDPR violation. The case concerns a confirmed breach of personal data protection rules. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 30 Jul 2021 | Amendă pentru încălcarea RGPDA fine of EUR 100 was imposed on an individual for violating GDPR requirements. The case was handled by the Romanian supervisory authority ANSPDCP. | RO | ANSPDCP | GDPR | €100 | ↗ |
| 30 Oct 2024 | Untold SRLUntold SRL was fined EUR 5,000 by ANSPDCP for violations of GDPR provisions. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 09 Aug 2022 | Denmar Nacrut SRLANSPDCP imposed a fine of EUR 1,000 on Denmar Nacrut SRL for violating GDPR provisions. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,000 | ↗ |