Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Romania: ANSPDCP issues clarification on sanctioning regime for public sector

On July 23, 2024, the National Supervisory Authority for Personal Data Processing (ANSPDCP) issued a clarification on the sanctioning regime applicable to public sector operators, based on Article 83(7) of the General Data Protection Regulation (GDPR).

The ANSPDCP clarified that the sanctioning regime provided for by Law No.190/2018 Implementing the General Data Protection Regulation (Law No.190) applies to the public sector and that the following steps must be adhered to:

  • a warning accompanied by a remedial plan must be applied to public authorities and institutions; and
  • the public authorities and institutions who have failed to carry out the remedial plan are subject to fines that range from RON 10,000 (approx. $2,190) to RON 200,000 (approx. $43,740).

You can read the press release, only available in Romanian, here.