EdLaw
Romania — Legea nr. 506/2004
Romania's transposition of the ePrivacy Directive 2002/58/EC (Monitorul Oficial nr. 1.101 of 25 November 2004, as amended — notably by Legea nr. 235/2015). It carries Romania's cookie rule and its unsolicited-communications regime. ANSPDCP is the supervisory authority.
The statute text is reproduced in Romanian, the authentic language — see LEGEA-506-2004.md.
Applicability to EdTech
The provision that reaches almost every product is art. 4 alin. (5): storing information, or obtaining access to information already stored, on a subscriber's or user's terminal equipment is permitted only where cumulative conditions are met. It is not limited to cookies — any client-side storage or device read is in scope, which takes in local caches, device identifiers and SDK telemetry on a school-issued device or headset.
Art. 12 is the opt-in rule for unsolicited commercial communications by automated calling systems, fax or electronic mail — the constraint on marketing to school contacts. Art. 3 carries the security-of-processing duty, and art. 5 and art. 8 govern traffic and location data respectively.
Key obligations at a glance
- Security of processing — art. 3; access procedures — art. 3^1.
- Confidentiality of communications; interception and surveillance prohibited except on the enumerated grounds — art. 4 alin. (2).
- Terminal-equipment rule (cookies and any client-side access) — art. 4 alin. (5).
- Traffic data — art. 5; itemised billing — art. 6; location data other than traffic data — art. 8.
- Subscriber directories — art. 11.
- Unsolicited commercial communications: opt-in — art. 12.
- Access to data by public authorities — art. 12^1.
- Sanctions — art. 13.
Contents
| Document | Covers |
|---|---|
| LEGEA-506-2004.md | the whole act in Romanian — art. 1–15 including art. 3^1 and art. 12^1, in the consolidated form with amendments integrated in place |
Licence
The corpus reproduces Legea nr. 506/2004 from the Portal Legislativ of the Ministerul Justiției (base document, amendments integrated in place).
Romanian copyright law places official legislative texts outside copyright. Articolul 9 of Legea nr. 8/1996 privind dreptul de autor și drepturile conexe (Portal Legislativ — Legea nr. 8/1996, read 2026-10-01 in the Internet Archive's id_ capture of 2026-07-14, because the portal refuses this network) provides: "Nu pot beneficia de protecția legală a dreptului de autor următoarele: [...] b) textele oficiale de natură politică, legislativă, administrativă, judiciară și traducerile oficiale ale acestora;"
Conditions: none attach to the statute text, because no copyright subsists in it. The corpus still identifies its source: each extracted provision carries a {.meta} provenance line, and Sources here links the official text (the Portal Legislativ). The changes (the selection of provisions, the Markdown layout and the added anchors) are described in Meta. The corpus does not claim that the publisher endorses it, and only the officially promulgated text is authentic.
Related
- EU ePrivacy Directive — the transposed instrument
- Legea nr. 190/2018 — the Romanian GDPR implementing act
- PKE — the Polish sibling transposition
Sources
- Portal Legislativ — Legea nr. 506/2004
- ANSPDCP — the supervisory authority