GDPR Fines Key Causes and Insights
A recent analysis of GDPR fines in Romania and EU reveals which compliance failures are most commonly leading to sanctions. The data shows a clear pattern: security-related issues top the list of causes for fines, followed by problems with consent and data subject rights.
Breakdown of Fines by Cause
-
Security breaches / Inadequate security measures – 12 fines (≈40% of total fines)
-
Lack of proper consent (e.g. for cookies or marketing) – 6 fines (≈20%)
-
Failure to respect data subjects’ rights – 5 fines (≈15%)
-
Unlawful processing (no valid legal basis) – 4 fines (≈13%)
-
Lack of transparency towards data subjects – 3 fines (≈10%)
-
Violation of data minimization principle – 1 fine (≈2%)