GDPR: Law on authority to supervise processing of personal data adopted

The Romanian Senate has adopted changes to the law on the functioning of the national authority for the supervision of personal data processing, ANSPDCP. The body will increase its control personnel, which would be able to fine or ban, in certain cases, the processing of personal data.

The new European-level GDPR regulation on privacy data comes into effect this week. In Romania, the authority overwatching its implementation is the ANSPDCP.

It will be able to control both private and public organisations in Romania to check if they comply with the GDPR rule and, if not, to apply sanctions.