Draft Order on notification process for registration
In the spotlight
IN THE SPOTLIGHT
Draft Order on notification process for registration
Following our recent post on the Draft Order published by the National Directorate for Cybersecurity (DNSC), we now take a closer look at the notification procedure it introduces.
The Draft Order introduces a structured framework to classify entities as either essential or important. It leverages digital tools, notably the NIS2@RO assessment tool and the ATHENA platform, to streamline the regis…
DNSC publishes draft order on notification process for registration and information transmission
The National Directorate for Cyber Security (DNSC) published yesterday, March 6, 2025, the Draft Order for the approval of requirements regarding the notification process for registration and the method of information transmission. Currently in the draft stage, the document is open for public consultation and may undergo changes following the feedback received.
The draft order aims to establish…
Controller fined for data breach linked to processor’s employee misconduct
On February 6, 2025, the Romanian DPA announced the conclusion of an investigation concerning a controller in the insurance field, finding the company in breach of the GDPR Articles 32(4) in conjunction with 32(1) and 32(2). As a result, the controller has been fined with the lei equivalent of EUR 3000.
The investigation commenced following a data breach notification by the controller, which re…
ARTICLES
Romanian DPA Report – A Year in Review – 2023
Author: Iurie Cojocaru, Mihai Rotaru
Romanian DPA case studies – our top 5 picks 1. Unlawful disclosure of a photo Case study: A doctor complained to the Romanian DPA that the public hospital where she is employed published her personal data without her consent. The hospital (acting as controller) published…![AdobeStock_295690916 [Converted]](https://privacyoutloud.ro/wp-content/uploads/2023/04/AdobeStock_295690916-Converted-320x240.jpg)
Trying to patch up an old law, the EDPB adopts a new ePrivacy guidance
Author: Iurie Cojocaru
It is hard to regulate technology. One of the reasons, amongst many others, is time. What you regulate today does not correspond to the technical landscape of tomorrow. Back in the first decade of 2000, when the ePrivacy Directive was adopted and amended, the European legislator did not…![AdobeStock_235934934 [Converted]](https://privacyoutloud.ro/wp-content/uploads/2022/07/AdobeStock_235934934-Converted-320x240.jpg)
Romanian DPA Report – A Year in Review – 2022
Author: Iurie Cojocaru, Oxana Gorgan
Romanian DPA case studies – our top 5 picks 1. Refusal to provide the contractual clauses which represent the safeguard for the data transfer to a third country Case study: A data subject complained about the refusal of a financial banking institution to provide him with…Speaking engagements
NNDKP organized a webinar on the EU AI Act
On 28 May 2024, NNDKP organized the EU AI Act: First steps towards compliance webinar which focused on the legal updates introduced by the new regulation.
Together with the participants, our colleagues, Iurie Cojocaru, Partner and Head of the Data Protection Practice, and Madalina Vasile, Managing Associate in the same practice, discussed about the legal provisions of the EU AI Act which compan…
Iurie Cojocaru – speaker at the „GDPR – Data Privacy Observer 2024” conference
On January 25, Iurie Cojocaru, Partner and Head of the Data Protection Practice, was a speaker at the „GDPR – Data Privacy Observer 2024” conference. Iurie Cojocaru talked in the conference`s first session of discussions and shared information on the personal data protection requirements resulting from the EU`s Data Act, recently entered into force.
Moreover, the third edition of the Romanian R…
NNDKP organized an event dedicated to data protection
On Tuesday, November 21, NNDKP`s Data Protection practice organized an event focused on current issues in the field of data protection and security, an information and debate opportunity dedicated to clients.
In an interactive discussion framework, the participants discussed topics of interest with NNDKP`s data protection team members and analyzed various situations encountered in practice, fac…
