The National Supervisory Authority for Personal Data Processing completed an investigation in February 2026 into the data controller SC Hayat Dent SRL and found a violation of Article 83(5)(e) of Regulation (EU) 2016/679.

Consequently, the data controller was subject to an administrative fine amounting to RON 10,190 (equivalent to EUR 2,000).

The investigation was initiated following a complaint submitted by the administrator of the company concerned, who reported that a former employee of the data controller had copied the contact details and medical records of all the company’s patients, who were subsequently contacted in order to reschedule their appointments at a new clinic.

In the course of the investigation, the data controller failed to provide all the information repeatedly requested by the National Supervisory Authority for Personal Data Processing.

At an initial stage, since the data controller had failed to provide the information requested by our institution, it was issued a reprimand. At the same time, a corrective measure was imposed requiring the data controller to grant the National Supervisory Authority access to the personal data and to all the information requested.

As SC Hayat Dent SRL failed to implement the previously imposed measure within the deadline set by the authority, the investigation was continued.

Given that the data controller failed to provide evidence that the corrective measure had been implemented, the National Supervisory Authority for Personal Data Processing imposed a fine on SC Hayat Dent SRL for violating Article 83(5)(e) of Regulation (EU) 2016/679.

At the same time, the data controller was ordered to implement the corrective measure of granting the National Supervisory Authority for Personal Data Processing access to the personal data and to all information necessary for the performance of its tasks, and to provide, specifically and in full, all the information requested by the supervisory authority in its correspondence, as necessary for handling the reported matters.

Legal and Communication Department

A.N.S.P.D.C.P