Decision no. 161/09/10/2018 of The National Supervisory
Authority for Personal Data Processing ("ANSPDCP"), on
the approval of the Investigations Procedure entered into force on
the 23rd of October 2018, in accordance with the powers given by
the General Data Protection Regulation to the supervisory
authorities.
According to the new procedure, investigations can be carried
out by ANSPDCP upon prior complaint or ex officio. The latter case
means that ANSPDCP may perform investigations in response to data
and information published in mass-media or obtained from other
national public entities or from foreign supervisory authorities.
Any of these investigations may be performed in order to verify the
accuracy of such information without prior notification, at the
headquarters of the investigated entity, at the headquarters of the
supervisory authority or simply through written
interrogatories.