Law No. 190/2018 Implementing the GDPR
National Supervisory Authority for Personal Data Processing
National Supervisory Authority for Personal Data Processing
The GDPR applies directly, but it leaves Member States choices in areas such as children, employment, sensitive data, research, freedom of expression, public-sector processing and supervisory procedure. Romania uses its national law to exercise those choices.
RO-LAW-190-2018: Law No. 190/2018
Start with the GDPR baseline, then assess the national provisions concerning sensitive-data profiling, national identifiers, employee monitoring, research and public-body remediation. Apply sector legislation and regulator measures where the national law refers to them.
Use the country-specific law page and controls as a delta layer. Retain the current official text, an applicability decision and evidence for every national rule implemented.