Services
Compliance assessment
The assessment shows how far your company’s processing of personal data complies with Law No. 195/2024. The controller is responsible for compliance with the principles of processing and must be able to demonstrate it (art. 5(2) and art. 24(1)). You receive a written report of what is missing and the priorities for putting it right. You can order the assessment on its own, and it is also the first step of every package.
What the Law provides
What we deliver
- ✓Online interviews with the people who know how the company processes data
- ✓Inventory of the personal data you process
- ✓Analysis of whether you must keep a record of processing activities
- ✓A written report of what is missing under Law No. 195/2024
- ✓Priorities for putting it right, starting with the highest risks
For whom
Companies that first want to know where they stand: they have documents drafted under Law No. 133/2011, have implemented the GDPR for clients in the European Union, or are starting from scratch and want to decide what to do next. Every package already includes an assessment.
What you get
A written report of what is missing under Law No. 195/2024 and the priorities for putting it right. The assessment does not include drafting the documents: they are prepared in a package, and the price of a separate assessment is not deducted from the package price.
Timeframe
The timeframe is set in the offer, after the free consultation, according to the number of processing activities and interviews.
What you give us
- A contact person who knows the company's activity
- Answers to the interview questions about the data processed and its purposes
- The list of suppliers with access to the data: accountant, IT, hosting, courier
- Existing data protection documents, including those drafted under Law No. 133/2011
How we work
- We sign a contract and issue an invoice.
- Work starts once the contract is signed.
- On request, we sign a confidentiality agreement (NDA).
- We deliver the documents by email, signed if you ask.
FAQ
Questions about this service
Does the assessment include drafting the documents?
No. You receive the report of what is missing and the priorities for putting it right; the company puts the measures in place and must be able to demonstrate that its processing complies with the Law. We draft the documents in a package. Every package starts with its own assessment, included in its price, which is why the price of a separate assessment is not deducted from the package. art. 24
We have documents drafted under Law No. 133/2011. Are they still valid?
Law No. 133/2011 was repealed when Law No. 195/2024 entered into force, on 23 August 2026. Old documents refer to a law that is no longer in force and do not reflect the rules of the new Law, such as the record of processing activities or notifying personal data breaches, where feasible, within 72 hours at the latest. Consents obtained under the old law remain valid if the way they were given meets the conditions of the new Law. The assessment shows what can be kept. art. 30 art. 33 art. 90
Do we have to keep a record of processing activities?
As a rule, yes. The exemption for enterprises with fewer than 250 employees does not apply where the processing is likely to result in a risk to people's rights, is not occasional or includes special categories of data or data relating to criminal convictions. Payroll, for example, is not occasional processing. The assessment examines this obligation for your company. art. 30
Free consultation
Not sure where to start?
Request a free 15-minute consultation. We will tell you which obligations under Law No. 195/2024 apply to you and which steps are needed.