EdLaw nat/ro/legea-190-2018/README.md

language: en · source language: ro · status: in-force · last checked: 2026-09-06

Romania — Legea nr. 190/2018

Romania's GDPR implementing act: "Legea nr. 190/2018 privind măsuri de punere în aplicare a Regulamentului (UE) 2016/679" (Monitorul Oficial nr. 651 of 26 July 2018). Per the supervisory authority's own summary (dataprotection.ro, read 2026-09-06), it implements in particular Arts. 6(2), 9(4), 37–39, 42, 43, 83(7), 85 and 87–89 GDPR. The supervisory authority is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

Status: fact documents pending

No statute text is reproduced here yet. Romania's official consolidated-legislation portal legislatie.just.ro is not machine-extractable from our network at last check (re-tested 2026-09-06: port 80 answers with a redirect to HTTPS, but the HTTPS endpoint closes the connection on every request — curl with HTTP/1.1 and HTTP/2, TLS 1.2 and 1.3, browser user-agents, and Anthropic's hosted fetcher all fail; suspected WAF client-fingerprint filtering). The EU N-Lex gateway to the portal is a JavaScript shell, and the ANSPDCP site carries summaries rather than the consolidated statute text. Per METHODOLOGY.md no text is included that has not been verified against the definitive source. The portal works in ordinary browsers: legislatie.just.ro search.

To complete: fetch the consolidated Legea 190/2018 from legislatie.just.ro (manually saved page, or from a network the portal accepts), extract in particular the public-authority fine regime (art. 13–14: warning-first and capped fines for autorități/organisme publice — schools), the special processing conditions, and ANSPDCP's designation; verify mechanically per the methodology.

Applicability to EdTech (pending verification)

Expected key points to verify against the text: reduced/staged sanctions for public bodies (relevant to Romanian public schools) and any national conditions on processing national identification numbers (CNP), which pupil-data systems commonly touch.

Sources