The objective of our institution is the protection of fundamental rights and freedoms of natural persons, especially the right to privacy, in connection with the processing of personal data and the free movement of such data. The main powers of the National Supervisory Authority are established by Law no. 677/2001 on the protection of individuals with regard to the processing of personal data and the free movement of such data, amended and completed.
The National Supervisory Authority is independent and autonomous from any authority of the public administration, as well as from any natural or legal person from the private area.
The National Supervisory Authority is holding an evidence of the data controllers (legal or natural persons) registered in the Register of the data processing which can be consulted online, by accessing the following address:
We emphasize that the National Supervisory Authority does not keep nor has direct access to the databases administrated by other public entities (for example the Directorate for Persons Record and Databases Management) or by private entities (for example the Credit Bureau).
In order to exercise the legal investigation powers, the National Supervisory Authority is empowered to ask the data controllers for information, documents or registration concerning the processing of personal data carried out.
According to Article 13 of Law no. 677/2001, the natural persons have to possibility to exercise their access right in order to obtain information regarding their personal data kept by a certain data controller. This right is exercised by submitting a written, dated and signed request to the data controller that has the obligation to answer within 15 days.
In the event of failure to comply with this right, the data may address a complaint to the National Supervisory Authority.
Complaint templates are available to the following address: