Starting with the 24th of June 24 2018, Law no. 129/2018 amending and completing the Law no. 102/2005 on the establishment, organization and functioning of the National Supervisory Authority for Personal Data Processing, as well as for repealing the Law no. 677/2001 on the protection of individuals with regard to the processing of personal data and the free movement of such data, published in the Official Journal of Romania no. 503 of 19th of June 2018 enters into force.

This law is mainly intended to ensure the consistency between the national regulation and the monitoring and control competences of the national supervisory authorities, established by the provisions of Article 55-59 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

It has also been established that the National Supervisory Authority for Personal Data Processing has powers to monitor and control compliance with the national legislation transposing Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data concerning the processing of personal data by the competent authorities for the purpose of the prevention, detection, investigation or prosecution of criminal offenses or the execution of criminal penalties and on the free movement of such data and repealing Council Framework Decision 2008/977/JHA.

Law no. 129/2018 published on the authority’s website within section “Legislation” can be consulted also here.

Law no. 102/2005 on the establishment, organization and functioning of the National Supervisory Authority for Personal Data Processing, with subsequent completions and amendments (updated) can be consulted here.

Legal and Communication Department

ANSPDCP