The National Supervisory Authority for Personal Data Processing completed, in 2025, an investigation at the controller Dumitru Viorel Focșa and found the breach of Article 5 paragraph (1) letter a) in relation to Article 6 paragraph (1) of Regulation (EU) 2016/679.

As such, the controller was sanctioned with a fine in the amount of 4,977.30 lei, the equivalent of 1,000 euros according to the exchange rate at the date of imposing the fine.

The investigation carried out at the controller was initiated following the receipt of a complaint from a data subject regarding the violation of data protection legislation.

Thus, it was found that the controller processed on its Facebook page (Meta), by disclosing in a public post, the personal data (name, surname, telephone number) of the Authority's petitioner, without his consent and without fulfilling any other conditions provided for in Article 6 paragraph (1) of the GDPR, although the controller had the obligation to process personal data lawfully, fairly and transparently towards the data subject.

In this context, we mention the fact that the controller was previously sanctioned by the National Supervisory Authority for a similar act.

Legal and Communication Department

A.N.S.P.D.C.P