BULLETIN №082Last updated · 02 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 06 Jun 2023 | S.C.In May 2023, ANSPDCP completed an investigation at operator S.C. and found a violation of GDPR provisions. As a result, a fine of EUR 3,000 was imposed. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 31 Jan 2025 | S.P.E.E.H. HIDROELECTRICA S.AThe company was fined for a data security breach during the launch of its application. The incident resulted from a technical error and insufficient testing, which did not ensure adequate data protection. | RO | ANSPDCP | GDPR | €15,000 | ↗ |
| 06 Mar 2025 | SHOPBAG GROUP ONLINE SRLSHOPBAG GROUP ONLINE SRL was fined EUR 2,000 by ANSPDCP. The authority found that the company failed to provide information requested for the performance of its supervisory tasks. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 15 Mar 2023 | Partidul Uniunea Salvați RomâniaThe fine was imposed for a data security breach involving the loss of confidentiality and integrity of data stored on a server. The incident resulted from a phishing attack that compromised the system. | RO | ANSPDCP | GDPR | €4,000 | ↗ |
| 11 Sept 2025 | Lenjeria Magică SRLLenjeria Magică SRL was fined by ANSPDCP in the amount of 15,000 RON for violating the national ePrivacy law. The breach concerned articles a)-l), n), o) and q). | RO | ANSPDCP | ePrivacy | €2,958 | ↗ |
| 26 Jun 2026 | Artmark Holding SRLArtmark Holding SRL was fined by ANSPDCP 10,000 RON for sending unsolicited commercial emails without obtaining prior explicit consent from recipients. The case concerns a breach of rules on electronic marketing communications and consent requirements. | RO | ANSPDCP | ePrivacy | €1,908 | ↗ |
| 01 Feb 2023 | Tensa Art Design SAANSPDCP completed an investigation in January 2023 at Tensa Art Design SA and found violations of GDPR provisions. As a result, the company was fined EUR 1,000. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 20 Feb 2025 | Medstar S.R.L.Medstar S.R.L. was fined by ANSPDCP for failing to notify the data breach to the supervisory authority. The company also did not inform the affected individuals about the unauthorized disclosure of their personal data. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 04 Aug 2022 | Sephora Cosmetics România SASephora Cosmetics România SA was fined EUR 2,000 by ANSPDCP for violating GDPR provisions. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 25 Sept 2023 | UAT Comuna AlbeniANSPDCP imposed a 10,000 RON fine on UAT Comuna Albeni for failing to implement measures previously ordered by the authority. The entity also did not respond to the authority’s requests. | RO | ANSPDCP | GDPR | €2,013 | ↗ |
| 03 Feb 2026 | Partidul Alianța pentru Unirea Românilor (AUR)The National Supervisory Authority for Personal Data Processing imposed a fine on the political party AUR for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 03 Oct 2022 | o persoana fizicăAn individual was fined 100 EUR for violating the General Data Protection Regulation. The case concerned a confirmed breach of obligations under the GDPR. | RO | ANSPDCP | GDPR | €100 | ↗ |
| 13 Dec 2021 | SC Nobiotic Pharma SRLSC Nobiotic Pharma SRL was fined €2,000 by ANSPDCP for failing to respond to information requests. The authority treated this as a breach of GDPR obligations. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 30 Apr 2026 | BLUE PROJECTS INDUSTRIES S.R.L.ANSPDCP completed an investigation in April 2026 into BLUE PROJECTS INDUSTRIES S.R.L. and found a GDPR violation. A fine of EUR 2,500 was imposed. | RO | ANSPDCP | GDPR | €2,500 | ↗ |
| 05 Feb 2026 | Tensa Art Design S.AThe National Supervisory Authority for Personal Data Processing completed an investigation in January 2026 at Tensa Art Design S.A. It found violations of GDPR provisions and imposed a fine of EUR 20,000. | RO | ANSPDCP | GDPR | €20,000 | ↗ |
| 19 Jun 2025 | SC Diamir SRLIn May 2025, ANSPDCP completed an investigation at SC Diamir SRL and found violations of GDPR provisions. The company received a warning and a fine of EUR 1,000. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 12 Jan 2024 | Alior Bank SA Varșovia Sucursala BucureștiAlior Bank SA, through its Romanian branch, was fined EUR 17,000 by ANSPDCP. The sanction followed an investigation that identified GDPR violations. | RO | ANSPDCP | GDPR | €17,000 | ↗ |
| 10 Nov 2025 | Whitedecor SRLThe National Supervisory Authority for Personal Data Processing completed an investigation in October 2025 at Whitedecor SRL and found violations of GDPR provisions. As a result, a fine of 1,000 EUR was imposed. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 02 Oct 2024 | Global Ports’s Services S.R.L.The company was fined for processing personal data without a legal basis, which breaches Article 6 of the GDPR. The case concerned unlawful processing by the controller. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 17 Nov 2025 | PGS SOFA & CO SRLIn October 2025, ANSPDCP completed an investigation at PGS SOFA & CO SRL and found a GDPR violation. The authority imposed a fine of EUR 8,000. | RO | ANSPDCP | GDPR | €8,000 | ↗ |