Legal Requirements Register

Requirement IDCategoryJurisdictionRequirement nameDescriptionApplicability to DP WATMonitoring ownerReview frequencyLast reviewedNotes
LEG-0001Data protectionEUGDPR (Regulation 2016/679)General Data Protection Regulation — personal data processing rulesDP WAT is typically processor; DPAs signed with customersAdministratorAnnual2026-02-01Also UK GDPR for UK customers
LEG-0002Data protectionRomaniaLaw 190/2018Romanian GDPR implementation lawSupplements GDPR for Romanian contextAdministratorAnnual2026-02-01
LEG-0003FiscalRomaniaCodul Fiscal (Law 227/2015)Romanian Fiscal Code — tax obligationsStandard business complianceAdministratorOngoing2026-02-01High change frequency; monitored via Monitorul Oficial
LEG-0004LaborRomaniaCodul Muncii (Law 53/2003)Romanian Labor Code — employment lawApplies to Romanian employeesAdministratorAnnual2026-02-01
LEG-0005CommercialRomaniaLaw 31/1990Romanian Companies LawSRL corporate governanceAdministratorAnnual2026-02-01
LEG-0006CybersecurityRomaniaNIS2 Directive transpositionNetwork and Information Security — critical infrastructureMay apply depending on customer sectorsCISOAnnual2026-02-01Monitor DNSC guidance
LEG-0007AccountingRomaniaLaw 82/1991Romanian Accounting LawFinancial reporting requirementsAdministratorAnnual2026-02-01Handled by external accountant
LEG-0008ContractualVariousCustomer contracts and NDAsSecurity requirements per customer agreementProject-specific; tracked in customer registerCISOPer project2026-02-01See customer-project-register.csv