The New Legal Framework in Personal Data Protection: It's Not About Fines, It's About Responsibility, Caution, and Clear Rules

This means that the operator must know their processing activities, assess risks, establish appropriate measures, rules, and internal procedures that reflect how data is managed. Law 195/2024 was adopted in July 2024 to give operators a transition period of 2 years, enough time to adapt processes and internal measures to the new legal requirements. Knowing what data you have, why you use it, and how you take care of it is an essential first step toward compliance. At the same time, data subjects must be clearly and accessibly informed about the data collected, the purposes of processing, the retention period, and their rights. An organization that responsibly manages data is better prepared for potential incidents and can more easily gain the trust of clients, employees, partners, and citizens. We provide explanatory materials and guidance for understanding and correctly applying the Law, continuously conduct training sessions, organize events dedicated to the new legislation, promoting an approach based on risk assessment and data protection.