On March 14, 2018 the Romanian law for implementing measures on
EU Regulation no. 2016/679 on the protection of individual rights
with regard to the processing of personal data directive no.
95/46/GDPR was submitted to the Senate. This is the long awaited
draft law regulating the GDPR requirements, especially the open
clauses and the sanctions applicable to Romanian public
institutions.
The legislative proposal is available in Romanian language and
can be reviewed at the following official link.
Among the most important measures proposed, we note the
following:
Data controllers may process the national identification number
(CNP or the number of the identity card / passport) in those cases
provided by art. 6 par. (1) of the GDPR Regulation. The data
processing grounded on legitimate interest (art. 6 paragraphs 1,
letter f)) becomes possible under the condition that certain
guaranties are established in the process, such as: (i)
establishing certain technical
