RO EU member state
Cookie consent rules in Romania
What Law 506/2004, art. 4(5) and the ANSPDCP expect from your cookie banner: when you need consent, how the reject option should look, and what has been enforced.
Sources checked 28 October 2026. Not legal advice.
Cookie law
Legea nr. 506/2004 (Law 506/2004 on privacy in electronic communications), Article 4(5)–(6)
Official guidance
No dedicated cookie guidance found — the regulator applies the GDPR consent standard and EDPB guidelines.
Banner languages
Romanian
What the rules say
- Visitors must agree before non-exempt storage or access on their device.
- They must first get clear, accessible information about the purposes.
- Explain the purposes when third parties process the stored information.
- Transmission and storage strictly necessary for a requested service are exempt.
Enforcement examples
2026
The ANSPDCP fined AVIZIERO S.R.L. RON 5,000 for breaching the cookie consent and information rules.
Source
How PrivacyPill handles this
- Nothing optional runs before a choice. Google tags start with Consent Mode v2 set to denied; other scripts marked with data-pp-category wait until their category is allowed.
- Equal first-layer buttons. "Accept all" and "Reject non-essential" sit side by side with the same weight, and a settings button lets visitors withdraw consent at any time.
- Consent per purpose. Analytics, marketing and functional cookies can be allowed separately in the preferences panel.
- Languages. Romanian isn't built in yet — rewrite the English texts in the customizer to show your own translation.
- Proof of consent. Every choice is logged pseudonymously with the banner version, exportable as CSV.
Frequently asked questions
Sources
- legislatie.just.ro/Public/DetaliiDocument/56973
- dataprotection.ro/?lang=ro&page=Comunicat_Presa_26.06.2026
This page summarises official sources checked on 28 October 2026. It isn't legal advice; regulators update guidance, so follow the links for the current text.