In order to offer guidance to data controllers, the National Supervisory Authority for Personal Data Processing issued Decision no. 128/2018 on the approval of the standard form for the personal data breach notification in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), published in the Official Journal of Romania no. 557 of 3rd of July 2018.

This decision published on the authority’s website within section “Legislation/NSAPDP Decision” can be consulted also here.

Legal and Communication Department

ANSPDCP