Provides telecom services, in Romania

Legea nr. 506/2004 privind prelucrarea datelor cu caracter personal și protecția vieții private în sectorul comunicațiilor electronice, Art. 3(5)-(12) · Read the law's page

• If you provide publicly available electronic communications services, notify the ANSPDCP without delay of a personal data security breach (Law 506/2004 Article 3, paragraph 6).
• Notify the subscriber or other person without delay where the breach could affect their personal data or private life, unless you have shown the ANSPDCP, to its satisfaction, that adequate technological protection measures were applied to the data concerned (Article 3, paragraphs 7 and 8).
• In the notice to the subscriber, describe the nature of the breach, give contact points and recommend mitigating measures, and add the consequences and the measures you proposed or took in the notice to the ANSPDCP (Article 3, paragraph 10).
• Inform subscribers of the risk and its possible consequences where a breach of data security creates a risk (Article 3, paragraph 5).
• Keep a record of all personal data breaches that describes what happened, its effects and the remedial measures taken (Article 3, paragraph 12).

Decizia ANCOM nr. 786/2022 pentru modificarea și completarea Deciziei președintelui Autorității Naționale pentru Comunicații nr. 1023/2008 privind realizarea comunicațiilor către Sistemul național unic pentru apeluri de urgență, art. I pct. 20 (art. 34^2) · Read the law's page

• If you provide publicly available number-based interpersonal communications services that originate calls to a number in the national or an international numbering plan, originate and transmit to the single emergency call center set by the administrator of the national single emergency call system the emergency communications that end users with hearing or speech disabilities, or with hearing or speech impairments proved by a medical document, make through a total conversation service, including where those users are roaming in Romania (Art. 34^2(1) of Decision 1023/2008; implements Directive (EU) 2018/1972, Art. 109(2) and (5)).
• In meeting that duty, take account of the capabilities of the single emergency call center set by the administrator of the national single emergency call system (Art. 34^2(2) of Decision 1023/2008).

Ordonanța de urgență a Guvernului nr. 155 din 30 decembrie 2024 privind instituirea unui cadru pentru securitatea cibernetică a rețelelor și sistemelor informatice din spațiul cibernetic național civil, approved by Legea nr. 124/2025, art. 15-17 · Read the law's page

• Report to the national cybersecurity-incident-response team, without undue delay, any incident with a significant impact on the provision of your services, through the Platforma națională pentru raportarea incidentelor de securitate cibernetică (PNRISC).
• Report to the national cybersecurity-incident-response team any information that lets it establish a cross-border impact of the incident, without undue delay and in any event within 6 hours of becoming aware of that information (Article 15(3)).
• Submit an early warning within 24 hours of becoming aware of a significant incident, stating whether it is suspected unlawful, malicious, or cross-border in impact; follow with a fuller incident report within 72 hours giving an initial severity and impact assessment and any known indicators of compromise; submit an interim report if the CSIRT requests one; and submit a final report within one month of the 72-hour report, or a progress report followed by a final report if the incident is still ongoing at that point.
• Where relevant, notify the recipients of your services of a significant incident that could affect them.
• If you are a trust service provider, report an incident affecting your trust services within a flat 24 hours of becoming aware of it, rather than on the graduated clock.
• This binds an essential or important entity under Articles 5 and 6, which name a piață online (online marketplace), a motor de căutare online (online search engine) and a platformă de servicii de socializare în rețea (social-networking-services platform) among the digital-provider categories it reaches expressly; the wider sector classes are reached as on this jurisdiction's companion risk-management row.

Ordonanța de urgență a Guvernului nr. 155/2024 privind instituirea unui cadru pentru securitatea cibernetică a rețelelor și sistemelor informatice din spațiul cibernetic național civil, approved by Legea nr. 124/2025, art. 11-14 · Read the law's page

• Take technical, operational and organisational measures proportionate to your risk exposure to identify, assess and manage the risks to the network and information systems you use in your operations or to provide your services.
• Cover at least: risk-analysis and system-security policy and its periodic review; evaluating the effectiveness of your risk-management measures; cryptography and encryption policy; supply-chain security, including the security of your relationship with your direct suppliers and service providers; security of system acquisition, development, maintenance and decommissioning, including vulnerability management and disclosure; human-resources security, access control and asset management; incident management; business continuity, including backups, disaster recovery and crisis management; basic cyber-hygiene practices and training; and multi-factor or continuous authentication.
• Have your governing body approve these measures, supervise their implementation and bear responsibility for them; have each member of the governing body attend accredited cybersecurity training and train all your staff regularly; establish permanent means of contact and allocate the resources the measures need; and designate the officers responsible for network and information-system security within 30 days of the notification of the DNSC director's decision identifying you and entering you in the register.
• This binds an essential or important entity under Articles 5 and 6, which name a piață online (online marketplace), a motor de căutare online (online search engine) and a platformă de servicii de socializare în rețea (social-networking-services platform) among the digital-provider categories it reaches expressly; the wider sector classes it also reaches (energy, transport, banking, health, water, digital infrastructure, public administration, and a size-gated telecom or managed-security-service provider) are reached too, by declaring that you are an essential or important entity.

Legea nr. 232/2022, art. 14, 15, 16 alin. (1), art. 19 alin. (3), art. 24 alin. (2) și art. 29 privind cerințele de accesibilitate aplicabile produselor și serviciilor · Read the law's page

• If you are a manufacturer, authorised representative, importer, distributor or service provider that relies on that limit, carry out the assessment of fundamental alteration or disproportionate burden on the criteria of Annex 6, keep the result for five years from the last time you made a product available or provided the service, and send a copy to the authorities of Article 19(1) on request (Art. 14(2) and (3)).
• If you are not a microenterprise and rely on Article 14(1) for a product or service, send information to that effect to the authorities of Article 19(1), or to the responsible authorities of the Member State where the product is placed on the market or the service is provided (Art. 14(7)).
• If you provide a service and rely on the disproportionate-burden limit, renew the assessment for each category or type of service when the service is changed, when the authorities ask, and at least every five years (Art. 14(5)); you cannot rely on the limit for a requirement where you received funding from a source other than your own resources to improve accessibility (Art. 14(6)).
• If you rely on the Article 14 exemption for a product, state in the EU declaration of conformity the accessibility requirements that the exemption covers (Art. 16(1)).
• The accessibility requirements of points 1 to 4 of Annex 1 apply to a product or service only so far as compliance does not require a significant change that fundamentally alters its basic nature and does not impose a disproportionate burden on you (Art. 14(1); implements Directive (EU) 2019/882, Art. 14(1)).
• A microenterprise that deals with products need not keep the assessment for five years, but must give the relevant assessment data to an authority of Article 19(1) that asks for it where it applies Article 14(1) (Art. 14(4)).
• A product or service that meets the national standards of other Member States adopting harmonised standards, or technical specifications, is treated as meeting the accessibility requirements to the extent those standards or specifications cover them (Art. 15).
• A product or service whose features, elements or functions meet the requirements of point 6 of Annex 1 is treated as meeting the relevant accessibility obligations of other acts of the European Union for those features, elements and functions, unless those acts provide otherwise (Art. 24(2); implements Directive (EU) 2019/882, Art. 24(2)).
• Until 28 June 2030 you may keep providing services with the products you used to provide similar services before that date, and service contracts concluded before 28 June 2025 stay valid without changes until they expire, for no more than five years from that date (Art. 29(1); Directive (EU) 2019/882, Art. 32(1)). Self-service terminals you used to provide services before 28 June 2025 may be used for similar services for no more than 20 years after they came into use (Art. 29(2); Directive (EU) 2019/882, Art. 32(2)).

Legea nr. 232/2022, art. 2 alin. (3)-(4) și (6), art. 4 alin. (1) și (3)-(5), art. 5, art. 13 și anexele nr. 1 (pct. 3-4) și 5 privind cerințele de accesibilitate aplicabile produselor și serviciilor · Read the law's page

• If you offer to consumers, after 28 June 2025, electronic communications services (other than machine-to-machine transmission), services giving access to audiovisual media services, consumer banking services, e-books and dedicated software, or e-commerce services, or the websites, mobile services and applications, electronic tickets and ticketing services, travel information and interactive self-service terminals of air, rail, maritime or bus passenger transport, design and provide the service to the accessibility requirements of points 3 and 4 of Annex 1 (Art. 2(3) and (4), 4(1), 13(1); implements Directive (EU) 2019/882, Art. 2(2), Art. 4(1) and (3) and Art. 13(1)).
• Make the service's websites, online applications and mobile applications perceivable, usable, understandable and robust, give information on how the service works and on the accessibility features of the products it uses through more than one sensory channel, in text formats that assistive tools can use, and offer support services that give information on accessibility in accessible forms (Annex 1, point 3.1).
• If you provide an e-commerce service, give information on the accessibility of the products and services you sell where the responsible economic operator provides that information, and make the identification, security and payment functions delivered as part of the service, and the identification methods, electronic signatures and payment systems you provide, perceivable, usable, understandable and robust (Annex 1, point 4.1(g)).
• If you provide a consumer banking service, make identification methods, electronic signatures, security and payment services perceivable, usable, understandable and robust, and keep information at no more than level B2 of the Common European Framework of Reference for Languages (Annex 1, point 4.1(e)).
• If you provide an electronic communications service, offer real-time text beside voice, offer total conversation where video is offered, and keep emergency communications in voice, text and video synchronised (Annex 1, point 4.1(a)); if you provide a service giving access to audiovisual media services, offer perceivable, usable, understandable and robust electronic programme guides and deliver the access services in full, synchronised and under the user's control (Annex 1, point 4.1(b)).
• If you provide e-books, deliver audio and text in synchrony where the e-book has audio, keep its digital files from preventing assistive technologies from working, give access to the content, navigation within it and its file format including dynamic layout, allow alternative renderings interoperable with assistive technologies, make it identifiable through metadata on its accessibility features, and keep digital rights management from blocking accessibility features (Annex 1, point 4.1(f)).
• If you provide air, rail, maritime or bus passenger transport services other than urban, suburban and regional transport, give information on the accessibility of vehicles and infrastructure and on assistance, and on smart ticketing, real-time travel information and additional services, information screens being covered only where they are interactive and located in Romania (Art. 2(4)(d); Annex 1, point 4.1(c)); for urban, suburban and regional transport, make the self-service terminals used to provide the service accessible under point 1 of Annex 1 (Art. 4(3), Annex 1, point 4.1(d)).
• Prepare the information required by Annex 5, explain how the service meets the accessibility requirements, make it public in written and oral form including in a way accessible to persons with disabilities, and keep it as long as the service is available (Art. 13(2)(a) to (d); Directive (EU) 2019/882, Art. 13(2)).
• Keep procedures that keep the provision of the service in conformity, and take account of changes in the characteristics of the service, in the accessibility requirements and in the harmonised standards or technical specifications on which conformity is declared (Art. 13(3)).
• If the service does not meet the applicable accessibility requirements, inform the authorities of Article 19(1) at once, state the non-conformity and the corrective measures taken, and take corrective measures; supply, on a reasoned request, all information showing that the service meets the requirements, and cooperate with the authorities (Art. 13(2)(e) to (g)).
• Make the built environment that consumers use to reach the service, where it is under your responsibility, meet the accessibility requirements of Annex 3 (Art. 4(4) and Annex 3, which Romania adopted under the option of Directive (EU) 2019/882, Art. 4(4)).
• Article 4(5) exempts a microenterprise providing services from the accessibility requirements of Article 4(3) and any obligation relating to compliance with them; in the Act, Article 4(3) is the rule that holds urban, suburban and regional transport services to point 4 of Annex 1, while Directive (EU) 2019/882, Art. 4(5), exempts microenterprises providing services from all its service requirements. Article 3(1) point 12 defines a microenterprise as an enterprise that has fewer than 10 employees and whose annual turnover does not exceed the leu equivalent of EUR 2 million or whose annual balance sheet total does not exceed the leu equivalent of EUR 2 million.
• The Act does not apply to pre-recorded time-based media or office file formats published before 28 June 2025, to maps and online mapping services where essential navigation information is given in an accessible digital format, to third-party content that you do not fund, develop or control, or to website and mobile application content that is an archive, meaning content that is neither updated nor edited after 28 June 2025 (Art. 2(6)).
• The court access of Article 26 and the contraventions of Article 27 do not apply to procurement procedures governed by Law 98/2016 and Law 99/2016 (Art. 26(2) and 27(6)).
• A service that meets the accessible-information duties of Regulation (EC) No 261/2004, Regulation (EC) No 1107/2006, Regulation (EC) No 1371/2007, Regulation (EU) No 1177/2010, Regulation (EU) No 181/2011 and Government Decision 108/2020 is treated as complying with the corresponding requirements of the Act (Art. 5; Directive (EU) 2019/882, Art. 5).

Ordinul directorului DNSC nr. 1/2025 (11 august 2025), Monitorul Oficial nr. 776/2025, art. 1-6 · Read the law's page

• If you are an entity in a sector of Annex 1 or 2 of Ordonanța de urgență nr. 155/2024, use the NIS2@RO platform or the NIS2@RO tool to evaluate whether you are an essential or important entity and to generate the notification form for registration (Articles 2 and 3).
• Complete the notification form's six sections: general data, specific data (including size, services, contact points and your network address ranges), specific situations, attached documents, preliminary assessment and entity representation (Articles 4 and 5).
• Attach the documents that show you meet the medium or large enterprise thresholds, and any further documents DNSC asks for before registration (Article 5(4)).
• Have your legal representative sign the form with a qualified electronic signature and upload it to the platform, or send it to evidenta@dnsc.ro or file it on paper at DNSC's headquarters when you use the tool (Article 6).

Ordinul directorului DNSC nr. 2/2025 (11 august 2025), Monitorul Oficial nr. 776/2025, art. 1-5 · Read the law's page

• If you are an entity within Annex 1 or 2 of Ordonanța de urgență nr. 155/2024 that has not been qualified as essential or important under its Articles 5, 6 and 9 criteria, assess the degree of disruption of each service you provide that falls within those Annexes, using the thresholds in Annex 1 to Order 2/2025, and use the result to complete the registration information (Article 1).
• Calculate your overall risk score with the formulas in Annex 2 to the order, starting from the base values for your entity type or sector and your size, and implement the category of security measures that the score sets (Articles 4 and 5(1)).
• If you operate in several sectors, assess your risk level for each sector and implement the level of measures that matches your highest overall score (Article 5(2)).
• If your own impact or probability values differ from the sector base values, send DNSC an analysis with a sound reason for each value you ask to change (Article 5(3)).
• Recalculate your overall score every three years and whenever the high impact threshold for your sector is exceeded, unless you already apply the highest level of measures (Article 5(5)).

Decizia ANCOM nr. 73/2023 privind obligaţiile de informare a utilizatorilor finali și alte măsuri pentru protecția acestora, art. 1, art. 5 alin. (1), art. 10 alin. (2), art. 12, art. 17 și art. 24 · Read the law's page

• If you provide internet access services, voice, SMS or MMS communications services or transmission services used for audiovisual media services, make the information that Articles 5 to 11 of the Decision require you to make available to the public, among it your tariff plans, the sections of your website those articles require and your complaints-handling policy, available to end users with disabilities in an accessible and relevant format adapted to the different types of disability (Art. 12; implements Directive (EU) 2018/1972, Art. 103(1)).
• If you have your own website, keep in an easily accessible place a section on free access to the emergency services through 112, on the conditions on which caller location is provided and on any limits on that access, and make that information available to end users with disabilities in an accessible and relevant format adapted to the different types of disability (Art. 10(2)).
• If you provide voice communications services that originate calls to numbers in the national or international numbering plans, inform the public through your contract documents and bills that the emergency services can be reached free of charge through 112, and make that information available to end users with disabilities in an accessible and relevant format adapted to the different types of disability (Art. 17).

Decizia ANCOM nr. 74/2023 privind stabilirea unor măsuri adresate utilizatorilor finali cu dizabilități, art. 2 și art. 5-14 · Read the law's page

• If you provide a service within the scope of the Decision, let end users with disabilities test free of charge, in your commercial premises and those of your authorized partners, the terminal equipment that can meet their needs before they buy it, explaining its functions and how it can meet their needs or allowing its return within a term you set in advance and communicate to the applicant (Art. 5(1)).
• On request of an end user with disabilities, give information materials in an accessible and relevant format on the functions of terminal equipment and how it meets that user's needs, to the extent you hold that information (Art. 5(2)).
• If you have your own website, give end users with disabilities a dedicated section, one click away from the main screen of the website and carrying a suggestive name, and publish in it, in a clear, complete, updated and optically readable form and in an accessible and relevant format, your offer of services addressed to end users with disabilities and other services or facilities they can use, your own offer of specific terminal equipment, any conditions or formalities they must meet to benefit from your offer, and the contractual conditions of your services and other information materials of interest to them (Art. 6(1) and (2); implements Directive (EU) 2018/1972, Art. 111(1)). Implement this within 4 months of the Decision coming into force (Art. 12(2)).
• On request, give the information of Article 6(2) free of charge in printed form or, if so requested, by e-mail, in an accessible and relevant format or in ways accessible through your customer relations service (Art. 6(3)).
• Let an end user with disabilities submit requests or complaints by telephone and by e-mail, including through a person the user designates; resolve their cases on installation and configuration of services and terminal equipment, faults of the contracted services and moving of services with priority, where those services are also available to other end users; give access to your customer relations service by means adapted to all categories of end users with disabilities, including a messaging service for users with hearing disabilities, on the same commercial conditions as other end users; if you provide mobile telephony, let visually impaired users query the cost-control service by sending an audio message as an alternative to the message service, on the same commercial conditions; and send bills by e-mail free of charge on request, in a format compatible with most document reading programs, with font colors contrasting with the background (Art. 7(1)). Implement this within 12 months of the Decision coming into force (Art. 12(1)).
• On request of an end user with disabilities, give the information that Articles 50^3, 50^4(1), 50^5 to 50^7, 50^10 and 50^11 of the code require, as applicable, through several sensory channels, in an easily understood way, with subtitles for instructional video, as text usable to generate alternative assistive formats such as a file compatible with Braille conversion, in suitable character sizes and with sufficient contrast, with a text alternative for non-text content and, on electronic media, in a form that is accessible, perceivable, usable, understandable and robust (Art. 7(2); implements Directive (EU) 2018/1972, Art. 102(1)).
• Offer packages of internet access services and number-based interpersonal communications services that give end users with visual, hearing or speech disabilities access to those services adapted to their needs and on terms equivalent to other end users (Art. 8).
• If you provide mobile electronic communications services, offer end users with disabilities, within your coverage area and on the same technical conditions as other end users, at least through service packages available exclusively at national level, these minimum monthly benefits: for end users with hearing or speech disabilities, an unlimited number of SMS within your own network and 300 SMS within national networks at a recommended price of 4 euro a month including VAT and, on request, 5 GB of data at a recommended price of 2 euro a month including VAT, a total recommended price of 6 euro a month including VAT; for end users with visual disabilities, 2,000 minutes within your own network and 500 minutes within national networks at a recommended price of 2 euro a month including VAT and, on request, 5 GB of data at a recommended price of 2 euro a month including VAT, a total recommended price of 4 euro a month including VAT (Art. 9). Implement this within 4 months of the Decision coming into force (Art. 12(2)).

OUG nr. 111/2011, art. 50^2 alin. (2), art. 50^3, art. 50^6 alin. (3) lit. e), art. 50^8, art. 60 alin. (1)-(3), art. 138 alin. (2^1), art. 142 pct. 17^4, 17^9, 17^11 și 25, art. 143 și art. 144 privind comunicațiile electronice, astfel cum au fost introduse sau modificate prin Legea nr. 198/2022 · Read the law's page

• If you provide publicly available electronic communications services, make the information that the section of the code containing Article 50^8 requires available on request in a format accessible and relevant to end users with disabilities, in line with Directive (EU) 2019/882 (Art. 50^8; implements Directive (EU) 2018/1972, Art. 102(1)).
• Give consumers, with the pre-contract information that Article 50^3 requires, details of the products and services you design for end users with disabilities and how to obtain updated information on them (Art. 50^3; implements Directive (EU) 2018/1972, Art. 102(1) and Annex VIII, point (5)).
• State in the contract summary you give a consumer before the contract is concluded the extent to which your products and services are designed for end users with disabilities (Art. 50^6(3)(e); implements Directive (EU) 2018/1972, Art. 102(3)(e)).
• Publish your contact details, the description of your services and your dispute settlement mechanisms in open data format, in a form that can be read optically and in a format accessible and relevant to end users with disabilities, in line with Directive (EU) 2019/882 (Art. 60(1) and (2); implements Directive (EU) 2018/1972, Art. 103(1)).
• In the description of your services that you publish, detail the products and services, including any functions, practices, policies and procedures and changes to how the service operates, designed specifically for end users with disabilities (Art. 60(3)(f); implements Directive (EU) 2018/1972, Annex IX, point 2.6).

OUG nr. 111/2011, art. 70 alin. (7), (9), (15) și (16), art. 142 pct. 37, 37^1 și 37^3, art. 143 și art. 144 privind comunicațiile electronice, astfel cum au fost înlocuite sau introduse prin Legea nr. 198/2022 · Read the law's page

• If you provide publicly available number-based interpersonal communications services that originate calls to a number in the national or an international numbering plan, take measures so that end users with hearing or speech disabilities, or with hearing or speech impairments proved by a medical document, can reach the single European emergency number 112 and other national emergency numbers through emergency communications on terms equivalent to those of other end users, in line with Directive (EU) 2019/882 (Art. 70(7); implements Directive (EU) 2018/1972, Art. 109(2) and (5)).
• Take the measures that ANCOM sets by decision for providers of publicly available number-based interpersonal communications services to comply with Article 70(7) and (8), the decision being the one in the entry for ANCOM Decision 786/2022 (Art. 70(9)).
• If an ANCOM decision pursuant to Article 70(15) requires you to give information on the existence, use and accessibility of 112 in subscriber directories, in documents for end users or in bills, give that information to end users with disabilities in formats accessible to them and adapted to the different types of disability (Art. 70(15) and (16)).

Ordonanța de urgență a Guvernului nr. 34/2008 privind organizarea și funcționarea Sistemului național unic pentru apeluri de urgență, art. 2 alin. (5), art. 14 lit. c), art. 15 lit. a1) și art. 32 alin. (1) lit. c), astfel cum au fost modificate prin Legea nr. 198/2022 · Read the law's page

• If you provide publicly available number-based interpersonal communications services that originate calls over public fixed networks, ensure the priority reception and routing to the most appropriate PSAP of emergency calls initiated by end users with disabilities, in particular persons with hearing or speech disabilities or impairments proved by a medical document (Art. 14(c); implements Directive (EU) 2018/1972, Art. 109(2) and (5)).
• If you provide publicly available number-based interpersonal communications services that originate calls over public mobile networks, ensure the priority reception and routing to the most appropriate PSAP of emergency calls initiated by end users with disabilities, in particular persons with hearing or speech disabilities or impairments proved by a medical document, including where those users are roaming in Romania (Art. 15(a1); implements Directive (EU) 2018/1972, Art. 109(2) and (5)).
• Treat as free of charge the messages that persons with hearing or speech disabilities, registered with the administrator of the national single emergency call system, send to number 113 in connection with emergency calls, and the short messages sent from number 113 (Art. 2(5)).