Romania

S.C. Hayat Medical & Dental S.R.L.

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-10-28.

Rank · Sector

#212

of 293 in Health Care

Rank · Romania

#106

of 299

Rank · All fines

#1,988

of 3,267

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-10-28
Controller / Processor: S.C. Hayat Medical & Dental S.R.L.
Sector: Health Care
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 58 (1) a), e) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on S.C. Hayat Medical & Dental S.R.L. A possible personal data protection infrigment was reported to the DPA, during the subsequent investigations it was found that the controller processed some personal data of patients without legal basis. The controller also did not adequately comply with the authorities investigation.

Open original source Links to the regulator's original publication or another source.