Romania

Public and Private Domain SA

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-03-20.

Rank · Sector

#171

of 219 in Employment

Rank · Romania

#163

of 298

Rank · All fines

#2,266

of 3,223

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-03-20
Controller / Processor: Public and Private Domain SA
Sector: Employment
Quoted Articles: Art. 5 (1) a), c), (2) GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has imposed a fine of EUR 3,000 on Public and Private Domain SA. The controller used body cameras to monitor its employees, even though less intrusive methods were available. Additionally, the controller failed to adequately inform its employees about the processing.

Open original source Links to the regulator's original publication or another source.