BULLETIN №082Last updated · 02 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 26 Jun 2025 | SC Piramida Trade Invest SRLSC Piramida Trade Invest SRL was fined EUR 2,000 by ANSPDCP. The case concerned a violation of Article 21 of the GDPR, which governs the right to object to data processing. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 08 May 2024 | Genpact România SRLThe ANSPDCP imposed a fine of EUR 3,000 on Genpact România SRL. The sanction concerned sending a file containing recruitment data to an unauthorized employee email address. The incident indicates a failure to control access to personal data and maintain confidentiality. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 27 Feb 2025 | Velvet Medical SRLThe National Supervisory Authority for Personal Data Processing completed an investigation in February into Velvet Medical SRL. It found a GDPR violation and imposed a fine of 1,000 EUR. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 28 Apr 2026 | CROWD ENTERTAINMENT LIMITEDCROWD ENTERTAINMENT LIMITED was fined EUR 15,000 by ANSPDCP for GDPR violations. The case concerned non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €15,000 | ↗ |
| 11 Apr 2025 | NEW GAMBLING SOLUTIONS S.R.L.In March 2025, ANSPDCP completed an investigation into NEW GAMBLING SOLUTIONS S.R.L. and found a GDPR violation. The company was fined EUR 2,000. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 30 Jul 2021 | Amendă pentru încălcarea RGPDA fine of EUR 100 was imposed on an individual by ANSPDCP for violating GDPR requirements. The case concerned a confirmed breach of personal data protection obligations. | RO | ANSPDCP | GDPR | €100 | ↗ |
| 29 Aug 2022 | Alpha Bank România SAAlpha Bank România SA was fined EUR 1,000 by ANSPDCP for a data security breach. A document was mistakenly sent to the wrong recipient via WhatsApp. | RO | ANSPDCP | GDPR | €1,000 | ↗ |
| 10 Dec 2025 | Crowd Entertainment LimitedThe National Supervisory Authority for Personal Data Processing completed an investigation in November 2025 at Crowd Entertainment Limited and found violations of GDPR provisions. As a result, an administrative fine of EUR 15,000 was imposed. | RO | ANSPDCP | GDPR | €15,000 | ↗ |
| 26 Sept 2023 | RESTART ENERGY ONE S.A.RESTART ENERGY ONE S.A. was fined by ANSPDCP in the amount of EUR 25,000 for violations related to personal data processing. The case concerned non-compliance with GDPR requirements in data processing activities. | RO | ANSPDCP | GDPR | €25,000 | ↗ |
| 16 Oct 2025 | PRIME TRANSACTION SAPRIME TRANSACTION SA was fined EUR 2,000 by ANSPDCP for a data security breach caused by a cyberattack. The incident led to unauthorized access to personal data of many individuals, including identification, contact, financial information, and copies of identity documents. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 25 Mar 2025 | NTT DATA ROMÂNIA S.A.NTT DATA ROMÂNIA S.A. was fined by ANSPDCP in the amount of EUR 25,000 for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €25,000 | ↗ |
| 23 Jun 2025 | Vodafone Romania S.A.Vodafone Romania S.A. was fined EUR 4,000 by ANSPDCP for GDPR violations. The investigation was completed in May 2025. | RO | ANSPDCP | GDPR | €4,000 | ↗ |
| 17 Sept 2024 | Constanța South Container Terminal SRLConstanța South Container Terminal SRL was fined by ANSPDCP EUR 3,000 after a third party gained unauthorized access to employees’ personal data. The breach resulted from inadequate security measures on a publicly accessible file management platform. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 11 Dec 2023 | Veranda Obor S.A.The National Supervisory Authority for Personal Data Processing imposed a fine on Veranda Obor S.A. for violating GDPR provisions. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 29 Dec 2025 | Ordinul Asistenților Medicali Generaliști, Moașelor și Asistenților Medicali din România – Filiala NeamțANSPDCP imposed a fine on the Neamț branch of the Romanian Order of General Nurses, Midwives, and Nurses for GDPR violations. The case concerned non-compliance with personal data protection requirements. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 08 Jun 2022 | Wens Experience SRLWens Experience SRL was fined EUR 1,500 by ANSPDCP for GDPR violations. The case concerned deficiencies by the company acting as a processor for a data controller. | RO | ANSPDCP | GDPR | €1,500 | ↗ |
| 19 Apr 2023 | Partidul Uniunea Salvați RomâniaThe National Supervisory Authority imposed a fine on Partidul Uniunea Salvați România (USR) for publishing personal data of persons with disabilities on its website without a legal basis. The authority found a breach of personal data processing principles. | RO | ANSPDCP | GDPR | €3,000 | ↗ |
| 12 Jan 2023 | BRISTOL LOGISTICS SABRISTOL LOGISTICS SA was fined EUR 2,000 by ANSPDCP for violating GDPR provisions. The case concerns non-compliant processing of personal data. | RO | ANSPDCP | GDPR | €2,000 | ↗ |
| 25 Sept 2025 | S.C. PRIMONET RO S.R.L.The company was fined for a data security breach that enabled unauthorized transactions on affected cards. The incident caused financial losses to the data subjects. | RO | ANSPDCP | GDPR | €20,000 | ↗ |
| 17 Jan 2025 | DELIVERY SOLUTIONS S.A.The company was fined for failing to implement adequate technical and organizational measures to ensure a level of security appropriate to the risk. The authority also found insufficient safeguards to ensure data confidentiality. | RO | ANSPDCP | GDPR | €2,000 | ↗ |