Guidelines/explanations for the proper application of Law No. 195/2024 on personal data protection

       The National Center for the Protection of Personal Data (NCPDP), for informational purposes, announces about the development of Guidelines/explanations for the proper implementation of Law No. 195/2024 on personal data protection, a legislative act that will enter into force on August 23, 2026.

       The purpose of these Guidelines is to assist data controllers, processors and other stakeholders in understanding, interpreting, and correctly applying the new legal provisions, in a context marked by rapid technological developments and the intensification of personal data flows. The document provides explanations and reasoning intended to clarify the new requirements introduced by the law, promoting a modern approach based on risk assessment and management and on the proactive responsibility of data controllers.

       The guidelines were developed based on the principles established by Regulation (EU) 2016/679 and are aimed at ensuring a high level of protection for the fundamental rights and freedoms of natural persons, strengthening legal security and creating a clear and coherent framework to support consistent practices in the field of personal data protection.

       At the same time, the NCPDP notes that the document is intended as a guide and serves as a reference tool for the correct and uniform application of the provisions of Law No. 195/2024 on personal data protection and recommends to be consulted regularly.

       The full text of the Guidelines/explanations for the correct application of Law No. 195/2024 can be accessed via the following link:

CONSIDERENTE_Legea_195/2024