Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — Natural Person : 10 k€ (2026)
- Autorité de contrôle
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Pays
- Roumanie
- Entreprise / secteur
- Natural Person
- Montant de l'amende
- 10 k€
- Date de la décision
- 30 janvier 2026
- Fondement juridique
- Art. 5, Art. 6, Art. 9, Art. 10, Art. 12 (3), (4), Art. 13, Art. 14, Art. 17 (1), Art. 58 (1)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Romanian DPA has imposed a fine of EUR 10,000 on a natural person. The controller operated a website on which identity cards containing personal data, including special category data, possible criminal convictions, data on the intimate lives of data subjects and possible debts, were published. The processing of this data was not based on a sufficient legal basis, and the controller did not ensure that the data was correct, complete or transparent. Furthermore, the controller did not adequately respond to requests by data subjects to delete their data. Furthermore, the DPA found that the controller did not provide the necessary information on its website, nor did it respond to requests from the DPA.
Décision officielle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)