The annual activity report for year 2020 is publicly available on the website of the National Supervisory Authority for Personal Data Processing under section “General Information/Public information/Annual reports”.

The annual report contains a synthetic presentation of the authority’s activity, being structured in accordance with the main competences, in the following chapters: Chapter I – General presentation, Chapter II – Regulation, advisory, consultation and public consultation activity, Chapter III – Monitoring and control activity, Chapter IV – Foreign affairs activity and Chapter V – Economic management of the Authority.

This report contains statically benchmarks highlighted in each chapter, including through graphics compared to previous years such as: the number of investigations performed in total or differentiated (ex office, respectively based on complaints), the number of complaints and intimations received, the number of corrective measures imposed (including fines), the number of points of view issued, the number of pending litigations, the number of press releases, the number of binding corporate rules/IMI.

The 2020 Annual Report also contains cases/case-laws regarding the investigation activity, as well as the most relevant points of view issued, that reflects the complexity of the activity performed in connection with the tasks of our institution.

Therefore, during 2020 there has been submitted to the National Supervisory Authority a number of 1151 request for issuance of opinions regarding various aspects referring to the manner of interpretation and enforcement of the Regulation (EU) 2016/679 by the controllers and their processors, from the public and private sector, by other entities, as well as by natural persons.

Also, our institution has issued opinions in relation to a number of 65 drafts legal acts prepared by public institutions and authorities that involved complex aspects regarding the processing of personal data, under Article 57 paragraph (1) letter c) of Regulation (EU) 2016/679.

In this period there have been issued 60 press releases published on the Authority’s website.

In relation to the control and monitoring activity, during 2020, the Authority has received a number of 5,480 complaints, intimations and notifications regarding data breaches, based on which there have been launched 694 investigations.

Following the investigations, 29 fines in total amount of Lei 892,115.95 have been imposed. Also, 64 reprimands have been applied and 65 corrective measures have been ordered.

In the context of the cooperation with other supervisory authorities from the European Union for the assurance of the mutual assistance, during 2020 there have been managed 56 requests regarding the application and observance of the Regulation (EU) 2016/679.

The activity report for 2020 has been provided to the competent authorities, according to the provisions of Article 5 paragraph (2) of Law no. 102/2005 regarding the set up, organisation and functioning of the National Supervisory Authority for Personal Data Processing.

Legal and Communication Department

ANSPDCP