- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Roumasport SRL – €10,184 Fine (Romania, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Roumasport SRL was fined for failing to secure personal data, which resulted in multiple data breaches affecting many customers. The Romanian data protection authority found that the company did not take necessary precautions to protect the data. This ruling stresses the importance of data security for all businesses.
What happened
The authority fined Roumasport SRL for not implementing adequate security measures, leading to data breaches.
Who was affected
Customers of Roumasport SRL whose personal data was exposed in the breaches.
What the authority found
The authority determined that Roumasport SRL violated GDPR by not ensuring appropriate security for personal data.
Why this matters
This case serves as a reminder for all businesses to prioritize data security and compliance with GDPR. Companies should regularly review their security practices to avoid penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 14 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Roumasport SRL (the controller) notified the Romanian DPA (ANSPDCP) of repeated data breaches affecting a significant number of its customers. Consequently, the DPA launched an investigation into the controller. The DPA found that the controller failed to implement appropriate technical and organisational measures to ensure that the level of security corresponded to the risk posed by the personal data processing. Therefore, the DPA issued a fine of RON 50,920 (€10,000) to the controller for violations of Article 32(1)(b) GDPR, Article 32(2) GDPR and Article 24(1) GDPR.
Related Enforcement Actions (0)
No other enforcement actions found for Roumasport SRL in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
30 December 2025
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€10,184
50,920 RON
About this data
Cite as: Cookie Fines. Roumasport SRL - Romania (2025). Retrieved from cookiefines.eu
Last updated: