Data Protection – New Approach by the CJEU on the Transfer of Pseudonymized Data (EDPS v. SRB, Case C-413/23 P)

On 4 September 2025, he Court of Justice of the European Union (CJEU) issued a practically relevant ruling that provides clarity on the handling of pseudonymized personal data under the EU General Data Protection Regulation (GDPR). Pseudonymization is defined in the GDPR as “the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person”.


Exchange of agricultural land and the law 17/2014 – between optimization and the risk of requalification

Law No. 17/2014, updated by Law No. 175/2020, strictly regulates the sale of agricultural land located outside the built-up areas of localities. In the case of a sale of such land, there are statutory preemption rights for certain categories of individuals (tenants, neighbors, the state, etc.) benefit from statutory preemption rights. These parties therefore have priority if the owner intends to sell, meaning they can opt to acquire the property on the same terms as the potential buyer within a specified period. The general rule is that the transfer of ownership of such land can only take place after a procedure for public notification of the offer, which allows the entitled parties to exercise their preemption rights. Violations of this rule lead to absolute nullity.


New Regulations 2025: Labor Law, Sick Leave, and Social Security in Focus

The year 2025 brings not only legal adjustments but also a change in the reporting and administrative rhythm for employers. In addition to managing employment relationships and payroll, greater emphasis is placed on the precise documentation of new aspects such as periods of incapacity for work, and compliance with tax obligations. Special attention is required for the new platform "REGES-Online" for employee registrations. Employers are responsible for providing complete and up-to-date data — failure to do so may result in blocks or sanctions. During this transition year, companies should review internal processes and establish clear responsibilities; otherwise, financial consequences and operational delays may occur.


New Guidelines from the Romanian Competition Council on the Approval of Direct Investments

Most foreign direct investments (FDI) in Romania are subject to prior approval before being carried out. We have reported on this before, as well as on the broad scope of affected investments. The legal framework has undergone several recent amendments. Most recently, on July 22, 2025, the Romanian Competition Council (Consiliul Concurenței) issued guidelines for the interpretation and application of Article 3(5) of Emergency Ordinance No. 46/2022 (EGO 46). These guidelines were approved by Order No. 2,112/2025 and published in the Official Gazette (Monitorul Oficial) No. 707 of July 30, 2025. EGO 46 governs the legal framework for the screening and approval of foreign direct investments (FDI) in Romania. The aim of the new guidelines is to clarify interpretation issues arising in practice and to ensure consistent application of legal provisions. What should investors know?  


The Classification of Occupations in Romania (COR) and Its Practical Significance

The “Clasificarea Ocupațiilor din România” (COR) is Romania’s official national system for the classification of occupations in the labor market. It assigns a six-digit code to each job title. This system serves as a key point of reference for employers, HR service providers, and authorities, supporting the uniform collection of labor market data.


Health Insurance for Family Members and New Sick Leave Regulations as of August 2025

On July 28, 2025, Law 141/2025 regarding "certain fiscal and budgetary measures" (the "Law") enters into force. Among other things, this law introduces new regulations regarding health insurance contributions in Romania. The law changes the system in such a way that many individuals who were previously covered under health insurance free of charge will now be required to contribute 10% of their income—either through their own contributions or through voluntary co-insurance by an insured person. This applies, for example, to individuals on parental leave, recipients of unemployment or other social benefits, recipients of minimum income for social integration, church and monastery personnel, war veterans, participants in the revolution, etc.—which also makes it relevant for employers.


Cybersecurity in Romania: New obligations for companies

Emergency Ordinance 155/2024 establishing a framework for the cybersecurity of networks and information systems in the civilian national cyberspace (“EO 155”) was adopted at the end of last year and came into force on December 31. The basics can be found in our last report:


„Preventive Settlement" (concordat preventiv) for avoiding insolvency

Insolvency proceedings are natural part of a functioning free market economy, even if they are often associated with considerable disadvantages for those affected. However, there are situations where institutional support for the debtor is necessary to effectively avert insolvency. For such cases, Romanian law provides for the instrument of the "preventive settlement" (rum. Concordat Preventiv), which is frequently used in practice.


Government austerity package with tax implications

The new Romanian ruling coalition, composed of pro-European parties, has decided to take responsibility before Parliament for a draft law (the “Draft”) concerning a series of fiscal and budgetary measures. The declared aim is to reduce the budget deficit and prevent the country's credit rating from being downgraded by international agencies.


Omnibus and the future of ESG reports

After several years of preparation for the EU Corporate Sustainability Reporting Directive (CSRD), and shortly after it came fully into force, the European Commission hit the panic button in February 2025 and released the so-called Omnibus Package. While intended to simplify the reporting process, this package also introduced uncertainty for long-term business planning and could potentially undermine the objectives of the Green Deal.