According to the International Association of Privacy Professionals (IAPP), the Romanian data protection authority (DPA) issued two fines for violations to the EU's General Data Protection Regulation (GDPR). SC Marsorom was fined 14,574.9 lei (approximately 3,000 euros) for not implementing sufficient security measures to prevent unauthorized access and disclosure of customers' personal information. Globus Score was fined 9,713.14 lei (approximately 2,000 euros) for not providing the information requested by the DPA.