Romania

ROUMASPORT SRL

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-05-09.

Rank · Sector

#137

of 213 in Employment

Rank · Romania

#87

of 283

Rank · All fines

#1,821

of 3,042

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-05-09
Controller / Processor: ROUMASPORT SRL
Sector: Employment
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on ROUMASPORT SRL. The controller accessed surveillance cameras to monitor its employees without a sufficient legal basis. The controller also used the data for disciplinary purposes.

Open original source Links to the regulator's original publication or another source.