Romanian Data Protection Authority's Practice For 2023 And Beyond: 10 Key-focus Areas

During the first half of this year, the activity of the Romanian data protection authority (ANSPDCP or the Authority) has been significant, and sanctions for non-compliance with the applicable legislation on personal data protection, and in particular for non-compliance with the provisions of the General Data Protection Regulation (GDPR) have not been uncommon.

Based on the information published by ANSPDCP (press release available here, in Romanian), in the first four months of 2023, 1565 complaints, referrals and notifications of security incidents were received (registered). Consequently, 199 investigations were opened. In addition, 36 fines, 40 warnings and 39 corrective measures were applied as a result of investigations carried out during the same period.