The National Supervisory Authority for Personal Data Processing, finalised, in October 2025, an investigation at the controller Agency for Control of Outstanding Debts S.R.L. and found the infringement of the provisions of Article 12 paragraphs (3) and (4) and of Article 15 paragraph (3) of Regulation (EU) 2016/679.

The controller was sanctioned with a fine of 10,192 lei, the equivalent of 2,000 euros.

The investigation carried out at the controller was initiated following the receipt of a complaint from a data subject regarding the violation of data protection legislation.

During the investigation, it was found that the controller did not present evidence regarding the communication, within the legal deadline, of an appropriate and complete response to the request by which the petitioner had exercised his right of access, in accordance with Article 15 of Regulation (EU) 2016/679.

It was also found that the controller did not send the data subject a copy of the data (voice recordings) requested by him or information regarding the reason for the refusal to comply with his request.

At the same time, pursuant to Article 58 paragraph (2) letters c) and d) of Regulation (EU) 2016/679, the National Supervisory Authority also ordered against the controller the following corrective measures:

to send a complete response to the request of the petitioner by communicating a copy of his personal data (voice recordings), in relation to the provisions of Article 15 paragraphs (3) and (4) of the GDPR;
to ensure compliance with Regulation (EU) 2016/679 of the personal data processing operations, by adopting the necessary technical and organizational measures, including in terms of appropriate training of the personnel designated for this purpose, so that the controller is able to correctly assess, handle and respond appropriately to the requests by which the data subjects exercise their rights, within the time limits and according to the conditions provided for in Articles 12-23 of the same European legal act.

Legal and Communication Department

A.N.S.P.D.C.P