BULLETIN №082Last updated · 01 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.1%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 20 Jan 2025 | Vodafone Romania S.A.Vodafone Romania S.A. was fined EUR 15,000 by ANSPDCP for violations of GDPR provisions. The case concerns non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €15,000 | ↗ |
| 01 Feb 2022 | SC Grupex 2000 SRLSC Grupex 2000 SRL was fined by ANSPDCP for unlawfully processing the personal data of institutionalized patients. The data appeared in filmed material available on the company's website. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 20 Jun 2024 | Rețele Electrice Dobrogea SARețele Electrice Dobrogea SA was fined by ANSPDCP in the amount of EUR 1,000 for violating GDPR provisions. The case concerns non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 19 Sept 2022 | Banca Comercială Română SAThe supervisory authority completed an investigation into Banca Comercială Română SA and found a breach of data processing security requirements. The issue was caused by a technical error in the operator’s IT application, which led to improper data processing. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 09 Oct 2019 | Vreau Credit S.R.L.Vreau Credit S.R.L. was fined by ANSPDCP in the amount of 20,000 EUR for failing to notify a personal data breach without undue delay. The company had been aware of the incident since December 2018 but did not inform the supervisory authority promptly. | RO | ANSPDCP | GDPR | €20,000 | ↗ |
| 07 Jul 2022 | E Software Concept SRLE Software Concept SRL was fined EUR 3,000 by ANSPDCP. The authority found that the company had not implemented adequate technical and organizational measures to ensure a level of security appropriate to the processing risk. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 01 Sept 2020 | Asociația de proprietari Bl. FC 5, orașul Năvodari, județul ConstanțaThe homeowners' association was fined by ANSPDCP EUR 500 for unlawfully processing an individual's image from the video surveillance system. The image was displayed on the building's notice board, which breached data processing principles. | RO | ANSPDCP | GDPR | €500 | ↗ |
| 21 May 2025 | Data Diggers Market Research SRLThe company was fined EUR 5,000 by ANSPDCP for failing to provide complete information to complainants exercising their right of access to personal data. The case concerns the obligation to respond fully to access requests. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 30 May 2025 | AG-BROKER ASIGURARE S.R.L.AG-BROKER ASIGURARE S.R.L. was fined 5,000 EUR by ANSPDCP. The sanction concerned the failure to notify a personal data security breach. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 10 Apr 2025 | Tensa Art Design S.A.Tensa Art Design S.A. was fined by ANSPDCP EUR 10,000 for GDPR violations related to its website www.lensa.ro. The case concerned non-compliant processing of personal data under data protection requirements. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 27 Jan 2025 | Orange România SAOrange România SA was fined EUR 20,000 by ANSPDCP for GDPR violations. The case concerns non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €20,000 | ↗ |
| 25 Apr 2025 | SC Travel Planner SRLSC Travel Planner SRL was fined EUR 5,000 by ANSPDCP for breaching Article 15 of the GDPR. The case concerned the improper handling of a data subject access request. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 20 Nov 2023 | Libra Internet Bank SALibra Internet Bank SA was fined EUR 1,500 by ANSPDCP for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,500 | ↗ |
| 08 Feb 2023 | Medijobs Platform SRLMedijobs Platform SRL was fined EUR 5,000 by ANSPDCP after unauthorized access to its IT infrastructure. The incident led to the downloading and deletion of certain personal data. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 23 Jul 2025 | Agricola International SAAgricola International SA was fined EUR 5,000 by ANSPDCP for a data security breach. The incident was reported by the company itself, indicating an internally detected event that required compliance review. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 18 Jul 2023 | ING BANK NV Amsterdam Sucursala BucureștiING Bank NV Amsterdam Sucursala București received a fine from ANSPDCP for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 14 Apr 2025 | Office Nova Concept SRLThe National Supervisory Authority for Personal Data Processing imposed a fine on Office Nova Concept SRL for breaching Article 17 of the GDPR. The case concerned non-compliance with obligations related to the right to erasure. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 31 Jan 2024 | Sectorul 1 al Municipiului BucureștiThe National Supervisory Authority for Personal Data Processing fined Sectorul 1 of Bucharest Municipality for GDPR violations. The entity failed to demonstrate compliance with a remediation measure, which formed the basis for the sanction. | RO | ANSPDCP | GDPR | €2,010 | ↗ |
| 23 Apr 2024 | ALPHA BANK ROMANIA SAALPHA BANK ROMANIA SA was fined by ANSPDCP for a data security breach caused by improper management of a record system by an employee. This led to unauthorized disclosure and access to the personal data of certain clients. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 04 Feb 2026 | GENPACT ROMANIA SRLThe National Supervisory Authority for Personal Data Processing completed an investigation into GENPACT ROMANIA SRL and found a GDPR violation. The company was fined EUR 10,000 due to the severity of the circumstances. | RO | ANSPDCP | GDPR | €10,000 | ↗ |