Operators of essential services are required to notify CERT-RO -
the national competent authority for security of networks and
information systems - for registration in the Register of operators
of essential services
by 17 December 2020. Otherwise,
these companies risk fines of, in some cases; up to 5 % of
their turnover.
The obligation to notify CERT-RO within the indicated time frame
stems from the requirements set out in the package of normative
acts issued last month by the Romanian Government, for the
application of Law no. 362/2018, which transposed Directive (EU)
2016/ 1.148 (NIS legislation) at national level.
To whom does the NIS legislation apply and what
obligations does it imply?