- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case Warning issued to Bucharest Municipality (District 4) – Violation Found (Romania, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Romanian Data Protection Authority issued a warning to the Bucharest Municipality for using surveillance devices without proper legal grounds. The local police were found to be recording personal data without following the law. This case is important as it highlights the need for legal compliance in data processing activities.
What happened
The authority found that the local police used surveillance devices to process personal data without a legal basis.
Who was affected
Individuals recorded by the local police using surveillance devices.
What the authority found
The authority ruled that the local police did not fulfill the legal requirements for processing personal data under GDPR.
Why this matters
This warning emphasizes the importance of legal compliance for public entities in data processing, urging them to review their practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Romanian DPA (ANSPDCP) received a complaint regarding the violation of the GDPR by the General Directorate of 4th District Local Police regarding the personal data processed using portable audio-video surveillance means. The "BADGE" surveillance portable device was used by the staff of the Local Police in missions and activities carried out in the field. Does the controller processed the personal data using the "BADGE" surveillance portable device (which processes image and voice) according to Article 5(1)(a) GDPR and Article 6(1) GDPR? The ANSPDCP found that the staff of the General Directorate of 4th District Local Police were hierarchically obliged to wear audio-video surveillance devices ("BADGE" type) during their working hours, without any legal provisions in force to govern the use of portable audio-video surveillance systems in the activity of local police officers. Therefore, the personal data (image and voice) were processed without a legal basis by using audio-video surveillance devices ("BADGE" type). The Romanian DPA issued the warning because the controller processed the personal data (image, voice) without fulfilling the legality conditions provided in Article 6(1) GDPR. In addition, the ANSPDCP applied a corrective measure through a remediation plan according to which the controller must ensure the compliance of the processing operations, performed by using the "BADGE" surveillance portable device, with the provisions of Article 5 and Article 6 GDPR.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case Warning issued to Bucharest Municipality (District 4) in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
11 December 2020
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
GDPRhub ID
gdprhub-3021About this data
Cite as: Cookie Fines. DPA case Warning issued to Bucharest Municipality (District 4) - Romania (2020). Retrieved from cookiefines.eu
Last updated: