Over 42% of the small and medium enterprises (SMEs) in Romania haven’t implemented the new norms on personal data protection (GDPR), which went into force in the European Union at the end of May, according to Florin Jianu, president of the biggest organization representing local SMEs – CNIPMMR.

He suggested that the state’s authorities should draft practical guidelines for companies on GDPR compliance, local Agerpres reported. He added that the prevention law, which allows companies to only get a warning at their first offense and only be fined if they don’t remedy the irregularities, to also apply in the GDPR area.

Some 80% of the SMEs that participated in a survey carried out by CNIPMMR said they had information about GDPR but only 21% said they managed to train their employees on the new rules. Almost all of the respondents (97%) consider the fines for not implementing GDPR norms, namely EUR 20 million or 4% of the turnover, are disproportionate.

Report: 20% of companies in Romania haven’t heard of GDPR

editor@romania-insider.com