BULLETIN №082Last updated · 02 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 26 Jun 2025 | SC Piramida Trade Invest SRLSC Piramida Trade Invest SRL received a fine of EUR 1,000 from ANSPDCP. The sanction concerns a breach of Article 6 GDPR, meaning personal data were processed without a valid legal basis. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 30 Dec 2025 | Roumasport S.R.LRoumasport S.R.L was fined EUR 10,000 by ANSPDCP for violating GDPR provisions. The case concerns non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €10,000 | ↗ |
| 20 Jun 2024 | Rețele Electrice Muntenia SARețele Electrice Muntenia SA was fined by ANSPDCP in the amount of 3,000 EUR for violations of GDPR provisions. The case concerns non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 03 Apr 2025 | Banca Transilvania S.A.Banca Transilvania S.A. was fined EUR 5,000 by ANSPDCP for processing personal data without a legal basis. The authority found a breach of the GDPR principle of lawfulness, fairness, and transparency. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 31 Jan 2023 | Dent Estet Clinic SADent Estet Clinic SA was fined EUR 1,000 by ANSPDCP for failing to notify the supervisory authority within 72 hours of becoming aware of a personal data breach. The incident involved unauthorized disclosure of health data, which required prompt reporting under GDPR rules. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 26 Nov 2025 | Cucina di Fabio S.R.L.ANSPDCP imposed a fine of EUR 2,000 on Cucina di Fabio S.R.L. for a GDPR violation. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 16 Sept 2024 | SC Class IT Outsourcing SRLSC Class IT Outsourcing SRL was fined EUR 1,000 by ANSPDCP for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 22 Aug 2024 | Kaufland România SCSKaufland România SCS was fined by ANSPDCP €2,000 for a data security breach. The case concerned an incident affecting data protection and required supervisory authority action. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 18 Nov 2024 | Altex România S.A.ANSPDCP completed an investigation in October 2024 at Altex România S.A. and found violations of GDPR provisions. As a result, the company was fined EUR 20,000. | RO | ANSPDCP | GDPR | €20,000 | ↗ |
| 27 Nov 2025 | PFA Nițu A. Cleopatra – Expert contabilThe National Supervisory Authority for Personal Data Processing fined PFA Nițu A. Cleopatra – Expert contabil EUR 2,000 for GDPR violations. The case concerned non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 05 Aug 2025 | Ordinul Biochimiștilor, Biologilor și Chimiștilor în Sistemul Sanitar din RomâniaANSPDCP imposed a EUR 1,000 fine on the Order of Biochemists, Biologists and Chemists in the Romanian Healthcare System for breaching Article 15 of the GDPR. The case concerned improper handling of a data subject access request. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 06 Dec 2021 | Societatea Civilă Medicală Policlinica TommedANSPDCP completed an investigation at Societatea Civilă Medicală Policlinica Tommed and found breaches of GDPR provisions. The operator was fined and required to align data collection and processing activities with data protection requirements to prevent unauthorized disclosure of personal data. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 16 Nov 2022 | Raiffeisen Bank SARaiffeisen Bank SA was fined EUR 3,000 by ANSPDCP for GDPR violations related to data security incidents. The case concerned shortcomings in the protection of personal data and the handling of security events. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 12 Mar 2025 | Automobilus International S.R.L.The company was fined for failing to implement appropriate technical and organizational measures to ensure an adequate level of security. The authority found this to be a breach of Article 32 of the GDPR. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 03 Aug 2023 | Med Life SAMed Life SA was fined EUR 2,000 by ANSPDCP. The authority found that the company violated the complainant’s right of access by refusing to provide certain video recordings from the reception area of one of its hospitals. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 25 Apr 2025 | SC Travel Planner SRLSC Travel Planner SRL was fined EUR 1,000 by ANSPDCP for breaching Article 33 of the GDPR. The case concerned failure to notify a personal data breach to the supervisory authority. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 21 May 2025 | Data Diggers Market Research SRLData Diggers Market Research SRL was fined EUR 5,000 by ANSPDCP. The authority found that the company did not provide complainants with complete information when they exercised their right of access to personal data. | RO | ANSPDCP | GDPR | €5,000 | ↗ |
| 12 May 2023 | Noi sancțiuniAn insurance-sector company was fined EUR 1,000 by ANSPDCP for breaching GDPR Article 5. The case concerned non-compliance with the core principles governing personal data processing under data protection law. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 23 Mar 2023 | Tehnoplus Industry SRLANSPDCP imposed a fine of EUR 3,000 on Tehnoplus Industry SRL for violating GDPR provisions. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 16 Nov 2022 | Raiffeisen Bank SARaiffeisen Bank SA was fined EUR 5,000 by ANSPDCP for GDPR violations related to data security incidents. The case concerned shortcomings in the protection of personal data and required remedial action by the bank. | RO | ANSPDCP | GDPR | €5,000 | ↗ |