Romania

EON ENERGIE ROMANIA S.A.

25,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-10-09.

Rank · Sector

#102

of 178 in Transportation and Energy

Rank · Romania

#15

of 296

Rank · All fines

#1,013

of 3,170

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-10-09
Controller / Processor: EON ENERGIE ROMANIA S.A.
Sector: Transportation and Energy
Quoted Articles: Art. 32 (1) b), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 25,000 on EON ENERGIE ROMANIA S.A. The controller failed to implement adequate technical and organisational measures, resulting in a data breach.

Open original source Links to the regulator's original publication or another source.