Romania

Tip Top Food Industry S.R.L.

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-09-25.

Rank · Sector

#144

of 216 in Employment

Rank · Romania

#104

of 296

Rank · All fines

#1,934

of 3,170

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-09-25
Controller / Processor: Tip Top Food Industry S.R.L.
Sector: Employment
Quoted Articles: Art. 5 (1) c) GDPR, Art. 9 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on Tip Top Food Industry S.R.L. Following a complaint from a data subject, the DPA found that the controller's facility access management system, which was also used for time logging, was processing employees' biometric data in the form of fingerprints without a legal basis. The authority found that it was not necessary to process staff fingerprints for the purpose given by the controller.

Open original source Links to the regulator's original publication or another source.