BULLETIN №081Last updated · 26 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 11 Mar 2025 | Noy Business Tranzactions SRLANSPDCP completed an investigation in February 2025 at Noy Business Tranzactions SRL and found a breach of Article 17 of the GDPR. As a result, the controller was fined EUR 1,000. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 15 Jun 2023 | Artima S.A.Artima S.A. was fined EUR 8,000 by ANSPDCP for a data breach. The incident exposed personal images, vehicle registration numbers, and vehicle details, indicating a breach of internal procedures and data confidentiality. | RO | ANSPDCP | GDPR | €8,000 | ↗ |
| 30 Jan 2026 | un operator persoană fizicăAn individual operator was fined 3,000 EUR for GDPR violations. The case concerned non-compliant processing of personal data and was handled by ANSPDCP. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 13 Nov 2023 | Rompetrol Downstream SRLRompetrol Downstream SRL was fined EUR 110,000 by ANSPDCP for failing to ensure the security of personal data. The authority found a breach of Article 32 GDPR, which requires appropriate technical and organizational measures. | RO | ANSPDCP | GDPR | €110,000 | ↗ |
| 05 Feb 2025 | FARMEC SAThe National Supervisory Authority for Personal Data Processing completed an investigation in December 2024 at FARMEC SA and found a GDPR violation. As a result, the company was fined EUR 5,000. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 18 Jun 2025 | Dincă Viorel GeorgeThe operator was fined for failing to respond to prior requests from the National Supervisory Authority for Personal Data Processing. The authority also found that a previously imposed corrective measure had not been implemented. | RO | ANSPDCP | GDPR | €200 | ↗ |
| 09 Jul 2025 | SC Tremend Software Consulting SRLSC Tremend Software Consulting SRL was fined by ANSPDCP for GDPR violations. The penalty amounted to EUR 3,000. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 06 Dec 2021 | Telekom România Communications SAANSPDCP completed an investigation into Telekom România Communications SA in November 2021. As a result, a fine of EUR 5,000 was imposed for GDPR violations. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 24 Apr 2025 | Dante International SAIn April 2025, ANSPDCP completed an investigation into Dante International SA and found violations of GDPR provisions. As a result, a fine of 10,000 EUR was imposed. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 09 Oct 2019 | Vreau Credit S.R.L.Vreau Credit S.R.L. was fined by ANSPDCP for failing to notify the supervisory authority of a data breach without undue delay and for unauthorized processing of personal data. The violations resulted in a loss of data confidentiality and indicate inadequate compliance controls. | RO | ANSPDCP | GDPR | €150,000 | ↗ |
| 03 Apr 2023 | Banca Transilvania SABanca Transilvania SA was fined EUR 2,000 by ANSPDCP for a GDPR breach. The case concerned improperly restricting access to an account in the mobile banking application despite the client's explicit request. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 06 Jun 2023 | S.C.In May 2023, ANSPDCP completed an investigation at operator S.C. and found a violation of GDPR provisions. As a result, a fine of EUR 3,000 was imposed. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 31 Jan 2025 | S.P.E.E.H. HIDROELECTRICA S.AThe company was fined for a data security breach during the launch of its application. The incident resulted from a technical error and insufficient testing, which did not ensure adequate data protection. | RO | ANSPDCP | GDPR | €15,000 | ↗ |
| 06 Mar 2025 | SHOPBAG GROUP ONLINE SRLSHOPBAG GROUP ONLINE SRL was fined EUR 2,000 by ANSPDCP. The authority found that the company failed to provide information requested for the performance of its supervisory tasks. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 15 Mar 2023 | Partidul Uniunea Salvați RomâniaThe fine was imposed for a data security breach involving the loss of confidentiality and integrity of data stored on a server. The incident resulted from a phishing attack that compromised the system. | RO | ANSPDCP | GDPR | €4,000 | ↗ |
| 11 Sept 2025 | Lenjeria Magică SRLLenjeria Magică SRL was fined by ANSPDCP in the amount of 15,000 RON for violating the national ePrivacy law. The breach concerned articles a)-l), n), o) and q). | RO | ANSPDCP | ePrivacy | €2,958 | ↗ |
| 26 Jun 2026 | Artmark Holding SRLArtmark Holding SRL was fined by ANSPDCP 10,000 RON for sending unsolicited commercial emails without obtaining prior explicit consent from recipients. The case concerns a breach of rules on electronic marketing communications and consent requirements. | RO | ANSPDCP | ePrivacy | €1,908 | ↗ |
| 01 Feb 2023 | Tensa Art Design SAANSPDCP completed an investigation in January 2023 at Tensa Art Design SA and found violations of GDPR provisions. As a result, the company was fined EUR 1,000. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 20 Feb 2025 | Medstar S.R.L.Medstar S.R.L. was fined by ANSPDCP for failing to notify the data breach to the supervisory authority. The company also did not inform the affected individuals about the unauthorized disclosure of their personal data. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 04 Aug 2022 | Sephora Cosmetics România SASephora Cosmetics România SA was fined EUR 2,000 by ANSPDCP for violating GDPR provisions. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €2,000 | ↗ |