Law note · Romania
Law No. 190/2018 on Measures for the Implementation of Regulation (EU) 2016/679
Romania gives the General Data Protection Regulation (GDPR) domestic effect through Legea nr. 190/2018, applicable from 31 July 2018. This session could not read the Act's primary text: legislatie.just.ro, the official consolidated-text portal, failed on every attempt, first with a DNS resolution failure via a direct fetch, then with an HTTP/2 stream reset via a crawler-based reader, confirmed twice, a genuine access failure rather than evidence the document does not exist. Every finding below rests on two commentary sources (CMS, DLA Piper) rather than a primary-source read.
What it asks of an app
- Establish a General Data Protection Regulation (GDPR) Article 6 lawful basis before processing personal data of a person in Romania; this document could not confirm the Act's own text and any Romanian-specific addition to that basis is unverified.
When LexLint raises it
Declared activities: crawls_web, trains_models, generates_content, deploys_chatbot, automated_outreach, high_risk_decisions, processes_voice, processes_biometrics
Primary source: CMS and DLA Piper commentary only
legislatie.just.ro confirmed unreachable (DNS failure, then HTTP/2 stream reset)