Romania: National Supervisory Authority for Personal Data Processing investigation into Continental Automotive Products SRL over alleged failure to protect employee data

Progress

Current status
in force
19 Jan 2026 in force

Scope

Implementers
Romania
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
other service provider
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

19 Jan 2026
in force

National Supervisory Authority for Personal Data Processing imposed EUR 15'000 fines against Continental Automotive Products SRL over internal disclosure of employees’ medical data and insufficient security measures

On 19 January 2026, the National Supervisory Authority for Personal Data Processing (ANSPDCP) imposed fines totalling EUR 15'000 (RON 25'455 and RON 50'911) against Continental Automotive Products SRL for breaches of the General Data Protection Regu…

Event type investigation
Action type ruling
Government branch executive
Government body data protection authority