IN THE SPOTLIGHT

AdobeStock_469644365 [Converted]

Cluj Tribunal confirms DPA sanction for unlawful use of cookies

On August 6, 2025, the Cluj Tribunal dismissed a complaint from a company in the healthcare sector. The company had been fined by the Romanian Data Protection Authority (DPA) and was contesting this fine. As a background, the DPA had fined the company approximately EUR 2,000 (in RON equivalent) for storing cookies on users’ devices via its website without obtaining their prior explicit consent …
AdobeStock_242262576

From Governance to Enforcement: What Applies Under the AI Act as of August 2025

On 2 August 2025, a new set of provisions under Regulation (EU) 2024/1689 on Artificial Intelligence (the AI Act) became applicable. As of this date, the following main provisions have entered into force: The formal establishment of the European AI Board – this body has already been constituted and has held several meetings. We expect the AI Board to play a key role in the EU AI governance…
Cyber security safe encrypted digital data networks for secure global information technology - Conceptual 3D illustration rendering

Law 124/2025 approves with amendments the NIS2-transposing ordinance in Romania

On 7 July 2025, Law No. 124/2025 was published in the Official Gazette of Romania, approving Government Emergency Ordinance No. 155/2024 on establishing a framework for the cybersecurity of networks and information systems in the national civil cyberspace (Ordinance), which transposes the EU NIS2 Directive. This law introduced several amendments to the Ordinance, among which the most relevant are …

ARTICLES

Digital graphs and hexagon grids with abstract high speed technology POV motion blur

GDPR | 7-year anniversary. Romanian DPA Publishes 2025 Q1 Enforcement Update

Authors: Iurie Cojocaru, Mihai Rotaru
As the EU General Data Protection Regulation (GDPR) marked its seventh anniversary on May 25, 2025, the Romanian DPA has released a short-form activity update covering the first four months of the year. The figures offer a snapshot of enforcement trends, complaint pattern…
Abstract digital data background. Wave with moving dots. Musical stream of sounds. 3D .

Romanian DPA Report – A Year in Review – 2023

Author: Iurie Cojocaru, Mihai Rotaru
Romanian DPA case studies – our top 5 picks 1. Unlawful disclosure of a photo Case study: A doctor complained to the Romanian DPA that the public hospital where she is employed published her personal data without her consent. The hospital (acting as controller) published…

Speaking engagements

This technology-inspired data abstract background is perfect for capturing the essence of the internet's vast expanse of information.

NNDKP organized a webinar on the EU AI Act

On 28 May 2024, NNDKP organized the EU AI Act: First steps towards compliance webinar which focused on the legal updates introduced by the new regulation. Together with the participants, our colleagues, Iurie Cojocaru, Partner and Head of the Data Protection Practice, and Madalina Vasile, Managing Associate in the same practice, discussed about the legal provisions of the EU AI Act which compan…
This technology-inspired data abstract background is perfect for capturing the essence of the internet's vast expanse of information.

Iurie Cojocaru – speaker at the „GDPR – Data Privacy Observer 2024” conference

On January 25, Iurie Cojocaru, Partner and Head of the Data Protection Practice, was a speaker at the „GDPR – Data Privacy Observer 2024” conference. Iurie Cojocaru talked in the conference`s first session of discussions and shared information on the personal data protection requirements resulting from the EU`s Data Act, recently entered into force. Moreover, the third edition of the Romanian R…
Colaj 3

NNDKP organized an event dedicated to data protection

On Tuesday, November 21, NNDKP`s Data Protection practice organized an event focused on current issues in the field of data protection and security, an information and debate opportunity dedicated to clients. In an interactive discussion framework, the participants discussed topics of interest with NNDKP`s data protection team members and analyzed various situations encountered in practice, fac…

Statistics