The EU General Data Protection Regulation Implications for Romanian Small and Medium-Sized Entreprises

Abstract

Starting on 25 May 2018, all Member States, including Romania, must apply the new GeneralData Protection Regulation 2016/679. It contains obligations regarding the collection, processing,storing, disclosing of data to individuals (clients, employees, etc.), with very large sanctions. Although, as a rule, record-keeping obligations do not apply to small and medium sizedenterprises, organizations with less than 250 employees have record-keeping obligations unless theprocessing is likely to generate certain risks for the rights and freedoms of the data subjects, if it’snot occasional or includes special data, and many SMEs enterprises fall into such situations. In this light, the present paper analyzes the impact of the new regulation and the stage ofimplementation of the necessary measures for compliance at the level of the Romanian small andmedium sized enterprises.

Keywords

• personal data protection
• GDPR
• SMEs
• implementation measures
• public authorities