Law no. 190/2018 on the application of Regulation 679/2016 (GDPR) in Romania
The internship contract
September 6, 2018
National identification number defined according to Law no. 190/2018 on the application of Regulation 679/2016 (GDPR) in Romania
September 27, 2018
In July 2018, Law no. 190/2018 on the application of Regulation 679/2016 (GDPR) in Romania entered into force. This law completes the GDPR Regulation and it generates some new obligations for Romanian legal entities.
Among the most important novelty items are:
- Extending the obligation to appoint a Data Protection Officer (“DPO“);
- Limiting the way in which video surveillance of employees can be done at work.
Law no. 190/2018 on the application of Regulation 679/2016 (GDPR) in Romania requires the employment of a DPO when the processing of personal data (national identification number) is based on the legitimate interest of the legal entity that processes the data.
Except for the cases provided by the GDPR Regulation, the Law imposes an obligation on legal persons to appoint a Data Protection Officer (DPO) when they are processing national identification numbers for a legitimate interest. The law introduces a new notion of “national identification number”.
