On December 31, 2024, Emergency Ordinance no. 155/2024 (OUG 155/2024) entered into force, establishing the legislative framework for the cybersecurity of networks and information systems in Romania. The regulatory act transposes Directive (EU) 2022/2555, known as the NIS Directive (Network and Information Security Directive) 2, and imposes compliance requirements for entities operating in sectors considered critical or important for the functioning of society and the economy. The competent authority for the application and monitoring of the provisions of the ordinance is the National Directorate for Cyber Security (DNSC).
For more information, please see the Romanian version of the article, here.
