Romania

Public and Private Domain SA

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-03-20.

Rank · Sector

#166

of 213 in Employment

Rank · Romania

#152

of 283

Rank · All fines

#2,141

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-03-20
Controller / Processor: Public and Private Domain SA
Sector: Employment
Quoted Articles: Art. 5 (1) a), c), (2) GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has imposed a fine of EUR 3,000 on Public and Private Domain SA. The controller used body cameras to monitor its employees, even though less intrusive methods were available. Additionally, the controller failed to adequately inform its employees about the processing.

Open original source Links to the regulator's original publication or another source.