Fan Courier Express received a fine of 20,380 lei from the National Authority for the Supervision of Personal Data Processing (ANSPDCP) for violating GDPR legislation.

The investigation was initiated following a complaint filed by a person who reported that they did not receive a response to their request for access and deletion of personal data. Following the inspection, it was found that Fan Courier did not respond to the request and did not provide a copy of the requested data. It was also identified that the operator processed personal data in a derogatory manner.

As a result, ANSPDCP ordered the company to fully respond to the applicant's request and to comply with the provisions of Regulation (EU) 2016/679, by adopting appropriate technical and organizational measures, including training staff on respecting the rights of data subjects.