SC Grupex 2000 SRL – €1,000 Fine (Romania, 2022)

€1,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal7 January 2022Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

SC Grupex 2000 SRL published video recordings of hospitalized patients on its website without permission. The Romanian data protection authority found this was illegal because it violated rules about processing personal data. This case highlights the importance of protecting sensitive information, especially in healthcare.

What happened

SC Grupex 2000 SRL published video recordings of hospitalized patients without their consent.

Who was affected

Patients whose video recordings were published on the SC Grupex 2000 SRL website.

What the authority found

The Romanian data protection authority ruled that the company unlawfully processed personal data, violating multiple GDPR articles.

Why this matters

This decision emphasizes that companies must handle sensitive data with care and obtain proper consent. It serves as a reminder for all businesses to review their data practices, especially when dealing with personal information.

GDPR Articles Cited

AI-verified

Art. 6(GDPR)
Art. 9(GDPR)
Art. 5(1)(a) GDPR
Art. 5(1)(b) GDPR
Art. 5(1)(c) GDPR
Art. 5(1)(f) GDPR
Art. 5(2) GDPR
View original scraped data
Art. 6(GDPR)
Art. 5(1)(a) GDPR
Art. 5(1)(b) GDPR
Art. 5(1)(f) GDPR
Art. 5(1)(c) GDPR
Art. 5(2) GDPR
Art. 9(GDPR)

Original data from scraper before AI verification against source document.

Source verified 16 March 2026
verified correct
Full Legal Summary
Detailed

The Romanian DPA started an investigation against the news website SC Grupex 2000 SRL after a regional Social Assistance and Child Protection Agency notified the DPA that video recordings of some of their hospitalised patients were published on its website. The Romanian DPA held that the publishing of these recordings constituted an unlawful processing of personal data in breach of Articles 6 and 9 GDPR, with reference to the principles in Article 5(1)(a), (b), (c), (f) and 5(2) GDPR. Based on these considerations, the DPA issued a fine of approximately €1000 (RON 4943.60) against the website. Additionally, the Romanian DPA also ordered the website to implement appropriate technical and organisational measures to ensure compliance with GDPR.

Details

Fine Date

7 January 2022

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€1,000

GDPRhub ID

gdprhub-4604

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. SC Grupex 2000 SRL - Romania (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: