The protection of personal data represents a new field for Romania’s legislative space. Its’ essence regards, in a generic form, the natural person’s right of protection of those specific features which lead to his/her identification and the state’s correlative obligation of adopting adequate measures to ensure an efficient protection.
For this purpose, a central authority empowered with such control competence, the National Authority for the Supervision of Personal Data Processing, came into existence in Romania, too. Recently set up, under the Law no. 102/2005, the Authority exerts the competence established mainly by the Law no. 677/2001, in terms of independence from any public authority or private entity.
Under the Law no. 677/2001 on the person’s protection regarding the processing of personal data and the free circulation of these data, the acquis represented by the Directive no. 95/46/EC was implemented, which sets up the general juridical frame of the personal data protection at European Union level.
The competences of the National Authority for the Supervision of Personal Data Processing are specific for any institution of control, including the investigation of personal data processing conducted under the Law no. 677/2001 and the sanctioning, if it comes out that the legal dispositions were infringed by the personal data processors, as a result of self-notification or based on complaints filed by the people whose rights were infringed.
