Whistleblower law in Romania #
Romania implemented Directive (EU) 2019/1937 through Legea nr. 361/2022 privind protecția avertizorilor în interes public. The Romanian framework pairs the standard 50-employee private-sector trigger with a visible role for ANI as both external authority and practical guidance body.
Applicable law #
Who must establish an internal channel #
Private legal entities with at least 50 employees must establish an internal reporting channel. Public authorities and institutions with at least 50 employees are also in scope, and Romanian official guidance goes further for certain public legal entities.
External reporting authority #
The official external channel is the Agenția Națională de Integritate (ANI) . ANI receives reports, can redirect them to the competent authority where needed, and publishes practical guidance for both reporters and employers.
Data protection authority #
For GDPR complaints about the handling of report data, the relevant authority is the ANSPDCP .
Key compliance points #
- If a private entity has fewer than 50 workers and no internal channel, the practical route is often the external channel.
- Anonymous reports may be examined if they contain sufficient indications of a breach, but identified reporters have fuller procedural rights.
- ANI explicitly positions itself as both an intake authority and a guidance body for implementation questions.
Official sources #
- Legea nr. 361/2022 — official text PDF
- ANI — whistleblower competence page
- ANI — frequently asked questions
- ANSPDCP — complaints submission
Deploy your reporting channel →
Last updated: