AI Omnibus enters into force
In the spotlight
IN THE SPOTLIGHT
AI Omnibus enters into force
On 27 July 2026, the AI Omnibus, proposed by the European Commission as part of the Digital Omnibus package and adopted by the European Parliament and Council as Regulation (EU) 2026/1744, entered into force across the EU.
The AI Omnibus aims to support innovation and strengthen the EU's competitiveness by simplifying certain compliance obligations under the AI Act, particularly for SMEs and st…
A telecommunications services company fined EUR 100,000 for inadequate data security measures
On June 17, 2026, the Romanian DPA concluded an investigation into a telecommunications services company. According to the DPA, the controller had failed to implement appropriate technical and organisational measures when configuring and operating its digital platforms to ensure the protection of its users' rights. As a result, the DPA issued an administrative fine amounting to RON equivalent of E…
Bucharest Court of Appeal confirms the annulment of GDPR sanction
On 8 July, 2026, a data protection-related court case involving a Romanian data controller challenging a GDPR-related sanction concluded in the company's favor, as the Bucharest Tribunal annulled the sanction and the Bucharest Court of Appeal upheld the decision.
As background, the DPA fined the controller the RON equivalent of EUR 4,000 after customer data, including email addresses, the first…
ARTICLES
GDPR | 8-year anniversary. Our top picks of past and upcoming judgements of the Court of Justice of the European Union
Authors: Iurie Cojocaru, Eduard Rașcă
Our top judgements of the Court of Justice of the European Union (26 MAY 2025 – 25 MAY 2026) 1. Judgement in the Case C-526/24 – Brillen Rottler What the Court mainly said: The CJEU held, amongst others, that a data subject access request may, in certain circumstances,…Romanian DPA Report – A Year in Review – 2024
Authors: Iurie Cojocaru, Diana Albu
Romanian DPA case studies – our top 5 picks 1. Refusal to provide actual call recording and provision of transcript only Case study: A customer filed a complaint with the Romanian DPA, claiming that a mobile phone company had denied her right of access by refusing to prov…
GDPR | 7-year anniversary. Romanian DPA Publishes 2025 Q1 Enforcement Update
Authors: Iurie Cojocaru, Mihai Rotaru
As the EU General Data Protection Regulation (GDPR) marked its seventh anniversary on May 25, 2025, the Romanian DPA has released a short-form activity update covering the first four months of the year. The figures offer a snapshot of enforcement trends, complaint pattern…Speaking engagements
![AdobeStock_469644365 [Converted]](https://privacyoutloud.ro/wp-content/uploads/2024/06/AdobeStock_469644365-Converted-320x240.jpg)
Iurie Cojocaru attended the IAPP UK Intensive 2026 Conference
Between 23-26 February, Iurie Cojocaru, Partner and Head of the Data Protection practice attended the IAPP UK Intensive 2026, a premier gathering for professionals in the fields of privacy, artificial intelligence governance and digital responsibility.
This year’s intensive showcased a broad spectrum of voices and perspectives and explored legislations, regulations, technology and operational p…
Oana Stefan – speaker at an online debate organized by Juridice.ro
On February 9, our colleague, Oana Stefan, Associate in the Data Protection practice, was a speaker at the online debate “Online platforms, all eyes and ears. At GDPR”, organized by Juridice.ro.
The debate was live on Juridice.ro.
More details about the event and speakers are available here.
Iurie Cojocaru – speaker at the GDPR Data Privacy Observer 2026 conference
On January 22, Iurie Cojocaru, Partner and Head of the Data Protection practice, was a speaker at the 5th edition of the GDPR Data Privacy Observer 2026 conference.
Iurie joined the discussions in the first panel of the event and talked about the impact of the Omnibus package on data protection.
Also, during the fifth edition Awards Gala organized by the Romanian Magazine for the Protection …
