Romania

Orange Romania SA

40,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-01-27.

Rank · Sector

#235

of 369 in Media, Telecoms and Broadcasting

Rank · Romania

of 283

Rank · All fines

#840

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-01-27
Controller / Processor: Orange Romania SA
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 12 (3), (4) GDPR, Art. 17 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Romanian DPA has imposed a fine of EUR 40,000 on Orange Romania SA. The controller failed to fulfil a request for the erasure of data. The controller also execsevly stored and collect data of data subjects without legal basis.

Open original source Links to the regulator's original publication or another source.