ELKB Data Protection in Romania

The Data Protection Act, Law no. 677/2001, as further amended and supplemented in May 2005 and October 2007, transposes the provisions of Directive 95/46/EC as of October 24, 1996 on the protection of individuals with regard to the processing of
personal data and on the free movement of such data and sets the general framework for processing of data protection in Romania.

The Data Protection Act defines personal data and data processing, regulates consent rules, data transfer, the obligation of data controllers and the rights and remedies of the data subjects.

In addition to the Data Protection Act, there is Law no. 506/2004 on personal data processing and privacy protection in the electronic communications sector (“Law 506/2004“), which provides the conditions required for the protection of data that is being processed by the electronic communication providers, the confidentiality of such data as well as the regime of the traffic data. Law 506/2004 transposes Directive 2002/56/EC as of July 12, 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector.