Navigating NIS2: Cybersecurity oversight - DNSC supervisory and sanctioning powers
23 December 2025
In application of the cybersecurity framework set by Government Emergency Ordinance no. 155/2024 on the cybersecurity of networks and information systems transposing the NIS2 Directive into Romanian law (“GEO 155/2024”), the National Cybersecurity Directorate (“DNSC”) issued Order no. 3/2025.
The new piece of legislation establishes:
- detailed rules on the supervision powers of DNSC, including on performance of inspection and audit activities,
- rights and obligations of entities in the context of an inspection
- rules for identifying and sanctioning offenses under GEO 155/2024.
