Romania

Individual trader (ride-hailing driver)

1,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-11-05.

Rank · Sector

#179

of 185 in Transportation and Energy

Rank · Romania

#286

of 302

Rank · All fines

#2,930

of 3,275

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-11-05
Controller / Processor: Individual trader (ride-hailing driver)
Sector: Transportation and Energy
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has imposed a fine of EUR 1,000 on an individual trader. The individual offers driving services through a ride-hailing platform. They posted their passengers name, ID card information, image trip detials and approximate location an a social media platform without consent, missing any legal basis.

Open original source Links to the regulator's original publication or another source.