Back to Feed
PolicyAug 18, 2026

ANSPDCP (Romania) - AMATO BESTSELLER S.R.L.

Romania's ANSPDCP fines company €54,300 for GDPR and ePrivacy violations.

Romania's data protection authority (ANSPDCP) has fined AMATO BESTSELLER S.R.L. €54,300 for multiple GDPR and ePrivacy Directive violations. The company failed to implement adequate security measures, allowing former employees access to sensitive personal data. Additionally, they engaged in excessive data processing, provided incomplete information to data subjects, and used automated dialing systems for commercial communications without prior consent.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run ANSPDCP?

Get an email when a new story names ANSPDCP, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

AMATO BESTSELLER S.R.L. failed on multiple fronts: former employees retained active access to personal data after leaving the organization, indicating a broken or absent offboarding process for revoking credentials and permissions. The company also processed data beyond its stated purpose, failed to properly inform data subjects of their rights, and conducted automated marketing calls without obtaining prior consent — all clear GDPR and ePrivacy violations. These failures demonstrate a systemic lack of data governance, not just isolated technical oversights. The resulting €54,300 fine highlights that regulators treat access control lapses and consent failures as serious, financially punishable risks rather than administrative technicalities.

What helps against this

How we list vendors

Entities

ANSPDCP (vendor)AMATO BESTSELLER S.R.L. (product)