Intra-group transfer of EUR 500,000 to a non-EU state: a case study
A corporate client needed to transfer EUR 500,000 to an affiliated company in a non-EU state. The bank required supporting documentation, and behind the…
Read the case studyCompliance
& Regulatory in Romania
GDPR, AML and industry-specific regulations — proactive compliance, not reactive.
In a legislative environment that keeps evolving, proactive compliance isn’t optional — it’s a strategic necessity. We build compliance systems tailored to your business and to Romanian and EU regulatory requirements.
What we offer
Specialised services
01
GDPR and data protection
Implementing GDPR requirements: external DPO, DPIA, breach management.
We offer full GDPR services: an initial compliance audit with a detailed gap analysis, appointment and performance of the external Data Protection Officer (DPO) role under Art. 37 GDPR, drafting and implementing privacy and cookie policies, carrying out Data Protection Impact Assessments (DPIAs) for high-risk processing, drafting and negotiating Data Processing Agreements (DPAs) with processors, implementing processing registers under Art. 30 GDPR, security-breach procedures with notification to the supervisory authority within 72 hours, handling data-subject rights requests (access, rectification, erasure, portability), and international data transfers (standard contractual clauses, BCRs, adequacy decisions).
02
Anti-money laundering (AML)
KYC/KYB procedures, staff training and reporting to the FIU.
We implement complete AML/CFT systems under Law 129/2019 and EU Directive 2015/849 (AMLD V): developing internal know-your-customer/know-your-business (KYC/KYB) policies and procedures, identifying and verifying ultimate beneficial owners (UBOs) per the National Office for Prevention and Control of Money Laundering (ONPCSB) requirements, implementing suspicious-transaction monitoring systems, reporting suspicious transactions and cash transactions to the FIU/ONPCSB, assessing money-laundering risk at client, product and distribution-channel level, periodic staff training (as required by law — at least annually), continuous procedure updates in line with legislative changes, and assistance during ONPCSB inspections, including document preparation.
03
Corporate compliance
Compliance programmes, codes of ethics and whistleblowing mechanisms.
We build comprehensive compliance programmes: drafting the Code of Ethics and Professional Conduct, implementing anti-corruption policies aligned with the FCPA (Foreign Corrupt Practices Act) and the UK Bribery Act, developing a whistleblowing channel under EU Directive 2019/1937 and Law 361/2022, internal-investigation (forensic) procedures, conflict-of-interest policies with a register and periodic declarations, gift, hospitality and sponsorship policies, integrity due diligence for business partners and third parties, ongoing monitoring and testing of the compliance programme’s effectiveness, and periodic reporting to management and the board on compliance indicators.
04
Sector-specific regulation
Compliance with requirements from the National Bank, the Financial Supervisory Authority, ANRE, ANCOM and other authorities.
We ensure compliance with sector-specific regulations: banking and financial services — National Bank of Romania prudential requirements (CRD V/CRR II), licensing of payment institutions and e-money institutions, PSD2 regulations; capital markets — Financial Supervisory Authority requirements, Market Abuse Regulation (MAR), prospectuses and public offerings; energy — ANRE licensing, regulated supply agreements, green certificates and support schemes; telecoms — ANCOM general authorisation, universal-service obligations, 5G network regulations; healthcare — sanitary authorisations, pharmaceutical regulations, medical-device regulation (MDR); and consumer protection — Consumer Protection Authority compliance, unfair commercial practices, warranties and returns.
05
Compliance audit
Assessing your compliance level with prioritised remediation plans.
We carry out compliance audits across every dimension: a general legislative-compliance audit (commercial, tax, employment law), a GDPR audit scored against the six data-processing principles, an AML/CFT audit assessing the maturity of internal controls, an audit of compliance with sector-specific regulations, a gap analysis benchmarked against industry best practice, an assessment of non-compliance risk with an estimate of financial impact (fines, reputational damage), a prioritised remediation plan with a timeline and owners, and a follow-up audit after six months to verify implementation of the recommendations.
06
Training
Training sessions on compliance, GDPR, AML and ethics.
We offer structured training programmes: induction sessions for new employees on compliance, GDPR and AML, mandatory periodic training (as required by law — GDPR annually, AML annually), interactive workshops with case studies and practical exercises, incident simulations (data-breach simulations, mock inspections), specialised training for management and the board on emerging legal risks, e-learning modules with testing and certification, awareness sessions on specific topics (cybersecurity, social engineering, phishing), and detailed reporting on attendance and assessment scores to meet audit requirements.
Coverage · Compliance & Regulatory
Compliance from Reghin, to European standards
GDPR, anti-money laundering, tax and labour inspections, licensing and dealings with regulators: we build processes that hold up under inspection, not just paperwork. We work with companies in Reghin and Mureș County and with operators across Romania, and for groups active elsewhere in Europe we align internal policies with EU requirements.
- 01HeadquartersReghinFirm headquarters, audits and training
- 02RegionalMureș CountyInspections and authorities in the county
- 03NationalRomaniaANAF, data protection and sector regulators
- 04EuropeanEuropeAlignment with European Union law
Case studies
Results in Compliance & Regulatory
Let’s talk
We’re ready to offer legal solutions tailored to the specifics of your situation.