The National Supervisory Authority for Personal Data Processing, completed, in October 2025, an investigation at the controller Vasile Nester – Cabinet de Avocat and found a violation of the provisions of Article 4 paragraph (5) letters a) and b) of Law no. 506/2004.

The controller was sanctioned with a fine in the amount of 20,000 lei.

The investigation was initiated following the receipt of complaints regarding a possible violation of data protection legislation.

The investigation found that, during the period May-October 2025, when accessing the sites owned by the controller, the installation of cookie modules was allowed on users’ devices, which were not technically necessary, without obtaining prior consent and without them being fully and correctly informed.

As such, the controller was fined for violating the provisions of Article 4 paragraph (5) letters a) and b) of Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector.

Legal and Communication Department

A.N.S.P.D.C.P