The activity report for the yea 2023 is publicly available on the website of the National Supervisory Authority for Personal Data Processing under the section “Informații generale/Informații de interes public/Rapoarte anuale”.

The annual report contains a synthetic presentation of the Authority’s activity, being structured in accordance with the main competence in the following chapters: Chapter I – General presentation, Chapter II – Regulatory activity, approval, consultation and public information, Chapter III – Monitoring and control activity, Chapter IV – Foreign affairs activities and Chapter V – Economic management of the Authority.

In the content of this Report, you can find statistical benchmarks highlighted in each chapter, including through comparative graphs with previous years, such as: the number of investigations carried out in total or separately (ex officio respectively based on complaints), the number of complaints, intimations and data breach notifications, the fines imposed, the amount of the fines, reprimands, corrective measures, the number of opinions issued, summons requests, press releases.

Also, the 2023 Activity Report contains the presentation of some significant cases from the investigations carried out and some relevant opinions issued, which reflects the complexity of the activity carried out, by reference to the tasks of our institution.

With reference to the monitoring and control activity, in 2023 the Authority received a total number of 4772 complaints, intimations and data breach notifications, based on which 548 investigations were carried out.

As a result of the investigations, 73 fines were imposed in the total amount of 2,348,265 lei. Also, 186 reprimands were issued and 138 corrective measures were ordered.

At the same time, we state that, during the year 2023, 970 requests for opinion were submitted to the National Supervisory Authority on various aspects related to the interpretation and application of Regulation (EU) 2016/679, by controllers and their processors, from the public and private sector, by other entities, as well as by individuals.

Regarding the activity of representation before courts, the National Supervisory Authority for Personal Data Processing managed in 2023 a number of 155 files pending before the courts in different procedural stages.

In this context, the 2023 Activity Report contains the presentation of several actions that were definitively completed in 2023, favourable for our institution.

The activity report for year 2023 was sent to the competent institution, in accordance with the applicable legal provisions.

Legal and Communication Department

A.N.S.P.D.C.P