Romania

RENAULT COMMERCIAL ROUMANIE S.R.L.

125,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-03-25.

Rank · Sector

#72

of 597 in Industry and Commerce

Rank · Romania

of 283

Rank · All fines

#429

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-03-25
Controller / Processor: RENAULT COMMERCIAL ROUMANIE S.R.L.
Sector: Industry and Commerce
Quoted Articles: Art. 28 (1) GDPR, Art. 32 (1) b), d), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 125,000 on RENAULT COMMERCIAL ROUMANIE S.R.L. The controller suffered a successful cyber attack due to insufficient technical and organisational measures to ensure data security, resulting in a large quantity of personal data being published on a platform. Additionally, the controller failed to use data processors that could guarantee the technical and organisational measures ensuring data security.

Open original source Links to the regulator's original publication or another source.