Romania

Crowd Entertainment Ltd

35,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-04-28.

Rank · Sector

#249

of 377 in Media, Telecoms and Broadcasting

Rank · Romania

#10

of 296

Rank · All fines

#904

of 3,170

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-04-28
Controller / Processor: Crowd Entertainment Ltd
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a), c), d), (2) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has imposed a fine of EUR 35,000 on Crowd Entertainment Ltd. The controller engaged in direct marketing activities without ensuring that it had a sufficient legal basis. Additionally, the controller processed data subjects' identification data excessively, beyond what was necessary for the processing purpose.

Open original source Links to the regulator's original publication or another source.