Legal instruments:

Law no. 102/2005 on the set up, organisation and functioning of the National Supervisory Authority for Personal Data Processing, republished

Law no. 129/2018 for the amendment and completion of Law no. 102/2005 on the set up, organisation and functioning of the National Supervisory Authority for Personal Data Processing, and repealing Law no. 677/2001 on the protection of individuals with regard to the processing of personal data and the free movement of such data

Law no. 190/2018 on implementing measures to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)

Decision no. 12/2018 on approving the form for the notification of personal data breaches pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC

Decision no. 133/2018 on the approval of the Procedure for receiving and solving complaints

Decision no. 161/2018 on the approval of the Procedure for conducting inspections

Decision no. 174/2018 on the list of the kind of processing operations which are subject to the requirement for a data protection impact assessment