Fine calculator

What the law says

• The fine is up to 1,000,000 lei for infringements of the obligations of the controller, the processor and the certification and monitoring bodies, and up to 2,000,000 lei for infringements of the basic principles of processing, including the conditions for consent, of the rights of data subjects, of the rules on transfers of data to other states or international organisations and of the obligations under Chapter VI, as well as for failure to comply with measures ordered by the Centre or to give it access. For an enterprise, the ceiling is 1% or 2% of turnover respectively, if that amount is higher. art. 88(1) art. 88(2)
• Of the fine set by the Centre, 10% applies from the first year, 40% from the second year and 100% from the third year after the Law enters into force. If the years are counted from 23 August 2026, the 10% rate applies until 22 August 2027, the 40% rate until 22 August 2028 and 100% after that. art. 90(4)
• The calculation assumes an infringement committed after the Law entered into force on 23 August 2026. Complaints lodged before that date are resolved under the liability rules of the law in force when the infringement was committed. art. 90(6)
• The Centre sets the actual amount according to the circumstances of the case: the nature, gravity and duration of the infringement, intent or negligence, the measures taken, cooperation with the Centre and other factors. For a minor infringement, a warning may be issued instead of a fine. art. 87(2)
• A fine may be imposed only where the infringement is found to have been committed intentionally or negligently. art. 87(3)
• For several infringements in the same or linked processing operations, the total fine cannot exceed the amount for the gravest infringement. art. 87(4)

The calculation shows the limits set by the law, not the fine in an actual case.