Secondary Legislation
Order no. 52/2002 on approving the minimum safety requirements for personal data processing
Decision no. 60/2006 on establishing standard forms for the notifications provided by Law No. 677/2001 on the protection of individuals with regard to the processing of personal data and the free movement of such data - annuled by Decision no. 95/2008
Decision no. 89/2006 on establishing the categories of personal data processing operations which are likely to present special risks to the rights and liberties of individuals - annuled by Decision no. 11/2009
Decision no. 90/2006 on the situations in which the notification for personal data processing is not required
Decision no. 91/2006 on establishing the situations in which the simplified notification form for personal data processing may be submitted
Decision no. 172/2007 on the adequate protection of personal data in Argentina
Decision no. 173/2007 on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documents Act of 13th of April 2000
Decision no. 174/2007 on the adequate protection of personal data provided in Switzerland
Decision no. 175/2007 on the adequate protection of personal data provided in Guernsey
Decision no. 176/2007 on the adequate protection of personal data provided in Isle of Man
Decision no. 28/2007 regarding personal data transfers in other countries
Decision no. 100/2007 regarding the cases in which the data controllers must not notify the supervisory authority
Decision no. 105/2007 regarding the processing of personal data performed in an evidence system of credit bureau type systems
Decision no. 90/2008 on the adequate protection of personal data provided in Jersey
Decision no. 95/2008 regarding the establishing of the standard type notification form ruled by the Law no. 677/2001 for the protection of persons regarding the processing of personal data and the free movement of such data
(Notification for personal data procesing)
Decision no. 101/2008 regarding the procedure of issuing the authorization for the processing of health personal data, under the terms of art. 9 paragraph 3 and 4 of the Law no. 677/2001 for the protection of persons regarding the process
Decision no. 10/2009 regarding the establishing of an authorization model for the transfer of personal data abroad based on the provisions of art. 29 paragraph 4 of the Law no. 677/2001 for the protection of persons regarding the processing of personal data and the free movement of such data ing of personal data and the free movement of such data
Decision no. 11/2009 regarding the establishing of the categories of personal data operations susceptible to present special risks for the rights and liberties of persons