- What is the Romanian National Supervisory Authority For Personal Data Processing?
This Romanian institution handles the verification of the Romanian legal entities or persons that during their activity have access to the public’s personal data.
- Do I have to register with the National Supervisory Authority in Romania?
If your business activity in Romania implies access to the personal data of the public that it is indeed necessary to register with this authority. In this case you are considered an „operator” of personal data. This means that the operator has decided to process personal data in certain operations performed by any means (automatic meansor not). Also, the person or entity may be designated as operator through an act or under a law that determines the purposes and means of processing personal data. The Romanian Law no. 677/2001 stipulates that a certain filing system is also required.
- Do I have to register with the Romanian authority for Data Processing?
According to Law no. 677/2001 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, amended data controllers must notify the processing they perform at the National Supervisory Authority for Personal Data Processing (DPA). The notification shall be submitted to the supervisory authority, personally or through a representative, before any processing or any combination of processing the same or related purpose.
- Exception of registering with the Romanian authority
Operators exempt from this requirement are those that perform data processing for the purposes set out in a decision of the President of DPA. This is outlined in the Romanian law therefore please contact our law firm to verify this matter.
- How much does it costs to notify the Romanian Data Processing authority?
At this moment this notification is free of charge.
- Can I activate as a data processing operator before I’m registered?
No. The operator shall notify the supervisory authority, personally or through a representative, prior to any processing. Failure to effect service in cases where such notice is required, and if the notification is incomplete or contains false information constitutes offenses, if committed in such circumstances a criminal offense and is punishable by fine.
- Can Enescu & Cuc Law Firm help me register as a Data Processing Operator in Romania?
Yes. We can provide full assistance in this respect, including filling-in of the necessary forms and notifying the Data Processing Authority. Contact us for more details!