On 10th of March 2009, Decision no. 10/2009 of the National Supervisory Authority for Personal Data Processing on establishing an authorization model for the transfer of personal data based on art. 29 (4) of Law no. 677/2001 entered into force.
Decision no. 11/2009 on establishing the categories of personal data operations which are likely to present special risks to the rights and freedoms of individuals was published in the Official Journal no. 155 of 12th of March 2009.