NSAPDP authority carries out its activity completely independent and impartial.
The supervisory authority shall monitor and control with regard to their legitimacy,
all personal data processing, subject to this law. In order to achieve this purpose, the
supervisory authority exerts the following attributions:
a) Issues the standard notification forms and its own registers; authorizes personal
data processing in the situations set out by law;
b) May dispose, if it notices the infringement of the provisions of the present law,
temporarily suspending the data processing or ending processing operations, the
partial or total deletion of processed data and may notify the criminal prosecution bodies or may file complaints to a court of law;
c) Informs the natural or legal persons that work in this field, directly or through
their associative bodies on the need to comply with the obligations and to carry
out the procedures set out by this law;
d) Keeps and makes publicly accessible the personal data processing register;
e) Receives and solves petitions, notices or requests from natural persons and
communicates their resolution, or, as the case may be, the measures which
have been taken;
f) Performs investigations—ex officio, or upon requests or notifications;
g) Is consulted when legislative drafts regarding the individual’s rights and freedoms are being developed, concerning personal data processing;
h) May draft proposals on the initiation of legislative drafts or amendments to
legislative acts already enforced, in the fields linked to the processing of
personal data;
i) Collaborates with the public authorities and bodies of the public administration,
centralizes and analyses their yearly activity reports on the protection of individuals with regard to the processing of personal data, issues recommendations
and assents on any matter linked to the protection of fundamental rights and
freedoms regarding the processing of personal data, on request of any natural
person, including the public authorities and bodies of public administration;
these recommendations must mention the reasons on which they are based and a
copy must be transmitted to the Ministry of Justice; when the recommendation
or assent is requested by the law, it must be published in the Official Gazette of
Romania, Part I.
The entire staff of the supervisory authority has the obligation of permanently
keeping the professional secrecy, except for the cases set out by law, regarding the
confidential or classified information they have access to in carrying out their duties,
even after termination of their legal employment relations with the supervisory
authority.
Investigations may be triggered by default or by complaint. This means that the
NSAPDP may take notice of certain violations of personal data protection law.
Ex-officio investigations may be carried out:
Data Protection Regulations: Overview of the Romanian Legislation and. . .
289
The supervisory authority shall monitor and control with regard to their legitimacy,
all personal data processing, subject to this law. In order to achieve this purpose, the
supervisory authority exerts the following attributions:
a) Issues the standard notification forms and its own registers; authorizes personal
data processing in the situations set out by law;
b) May dispose, if it notices the infringement of the provisions of the present law,
temporarily suspending the data processing or ending processing operations, the
partial or total deletion of processed data and may notify the criminal prosecution bodies or may file complaints to a court of law;
c) Informs the natural or legal persons that work in this field, directly or through
their associative bodies on the need to comply with the obligations and to carry
out the procedures set out by this law;
d) Keeps and makes publicly accessible the personal data processing register;
e) Receives and solves petitions, notices or requests from natural persons and
communicates their resolution, or, as the case may be, the measures which
have been taken;
f) Performs investigations—ex officio, or upon requests or notifications;
g) Is consulted when legislative drafts regarding the individual’s rights and freedoms are being developed, concerning personal data processing;
h) May draft proposals on the initiation of legislative drafts or amendments to
legislative acts already enforced, in the fields linked to the processing of
personal data;
i) Collaborates with the public authorities and bodies of the public administration,
centralizes and analyses their yearly activity reports on the protection of individuals with regard to the processing of personal data, issues recommendations
and assents on any matter linked to the protection of fundamental rights and
freedoms regarding the processing of personal data, on request of any natural
person, including the public authorities and bodies of public administration;
these recommendations must mention the reasons on which they are based and a
copy must be transmitted to the Ministry of Justice; when the recommendation
or assent is requested by the law, it must be published in the Official Gazette of
Romania, Part I.
The entire staff of the supervisory authority has the obligation of permanently
keeping the professional secrecy, except for the cases set out by law, regarding the
confidential or classified information they have access to in carrying out their duties,
even after termination of their legal employment relations with the supervisory
authority.
Investigations may be triggered by default or by complaint. This means that the
NSAPDP may take notice of certain violations of personal data protection law.
Ex-officio investigations may be carried out:
Data Protection Regulations: Overview of the Romanian Legislation and. . .
289