Data centre regulation in Romania
Our tracker lists 8 rules for building and running a data centre in Romania, national and EU, and 5 of them are in force.
Each comes with its status, who it applies to and the next date that matters. When a rule here changes, the change is logged below with its date.
- 5 of 8rules that apply, in forceRegulation tracker, updated 19 Oct 2026
- 3not yet in forceproposed, adopted or in scrutiny
- 14 Dec 2026next date, EURegulation tracker, updated 19 Oct 2026
Rules that apply in Romania
National rules first, then the EU rules every member state applies. Status as on the tracker.
| Rule | Level | Status | Applies to | Next date |
|---|---|---|---|---|
| Emergency Ordinance 155/2024 on the cybersecurity of networks and information systems (NIS2 transposition), Articles 5, 6 and 18 and Annex 1, sector 8 (data centre service providers); approved with amendments by Law 124/2025 | National | In force since 31 December 2024 (published that day in Monitorul Oficial no. 1332); current text from 6 July 2026 | New and existing sites. Data centre service providers: essential entities if large enterprises, important entities if large or medium and not essential; must notify the National Cyber Security Directorate (DNSC) for registration within 30 days of the ordinance applying to them; ANCOM is the sectoral cyber security authority for data centre service providers | No date published |
| Law 135/2007 on the archiving of electronic documents (republished 2014), Article 17 (prior authorisation of data centres) | National | In force since 25 May 2007 (published in Monitorul Oficial no. 345 of 22 May 2007); current text from 29 June 2024 (Law 201/2024) | Data centres in which electronic archives are stored; prior authorisation covering the integrity and security of the documents, the security of the space housing the equipment, and recovery of information after natural disasters | No date published |
| EED reporting, Article 12 and Delegated Regulation 2024/1364 | EU | In force | New and existing sites. Data centres ≥500 kW installed IT power | 15 May 2027, next annual report |
| EED waste heat, Article 26(6) | EU | In force | New and existing sites. Data centres >1 MW total rated energy input | Ongoing duty |
| EED energy management systems, Article 11 | EU | In force as a Directive duty on Member States; deadline not yet reached | Enterprises, including data-centre operators, with average annual energy consumption above 85 TJ (23.6 GWh) over the previous three years, all energy carriers together | 11 October 2027, certified energy management system in place |
| EU rating scheme, delegated regulation adopted 21 Sep 2026 | EU | Adopted, in Parliament and Council scrutiny | New and existing sites. Same ≥500 kW reporting population | In force 20 days after Official Journal publication, if not objected to |
| EU minimum performance standards | EU | Consultation open | Not yet defined | 14 December 2026, consultation closes |
| Cloud and AI Development Act, COM(2026) 502 | EU | Proposal, with Parliament and Council | Cloud and AI infrastructure providers broadly | No fixed date |
Romania in detail
What the national rules say, with the legal texts.
Romania has no national data centre energy rule yet: its Energy Efficiency Law 121/2014, in the text consolidated to 8 August 2026, contains no data centre reporting or waste heat duty, and we found no other act transposing them. The duties that name data centres today come from security law. Under Emergency Ordinance 155/2024, in force since 31 December 2024, data centre service providers are a listed digital infrastructure sector: large providers are essential entities, medium ones important, and they must notify the national cyber security directorate for registration. Separately, data centres that store electronic archives need prior authorisation under the electronic archiving law of 2007.
Dates to watch
The next dates for Romania and the EU, soonest first.
- 14 Dec 2026The EU Commission's minimum performance standards consultation and call for evidence closes
- 15 May 2027EU database dueevery year
- 11 Oct 2027EU deadline under Article 11 of the Energy Efficiency Directive for a certified energy management system at enterprises above 85 TJ (23.6 GWh) of annual energy consumption
Formal refusals and bans since 2025
Verified decisions only.
No formal refusal or ban recorded for Romania; absence is not evidence of low planning risk.
Decisions from 1 Jan 2025; statuses checked 21 Oct 2026.
What changed
The latest changes to these rules on the tracker, newest first.
- 18 Oct 2026Added to the tracker: EED energy management systems, Article 11 (In force as a Directive duty on Member States; deadline not yet reached).
- 15 Oct 2026Added to the tracker: Emergency Ordinance 155/2024 on the cybersecurity of networks and information systems (NIS2 transposition), Articles 5, 6 and 18 and Annex 1, sector 8 (data centre service providers); approved with amendments by Law 124/2025 (In force since 31 December 2024 (published that day in Monitorul Oficial no. 1332); current text from 6 July 2026).
- 15 Oct 2026Added to the tracker: Law 135/2007 on the archiving of electronic documents (republished 2014), Article 17 (prior authorisation of data centres) (In force since 25 May 2007 (published in Monitorul Oficial no. 345 of 22 May 2007); current text from 29 June 2024 (Law 201/2024)).
Questions
Which rules apply to a data centre in Romania?
Our tracker lists 8 rules for building and running a data centre in Romania, national and EU, and 5 of them are in force.
What is the next date for data centre rules in Romania?
The next date is 14 Dec 2026: the EU Commission's minimum performance standards consultation and call for evidence closes.
Sources
From the European data-centre regulation tracker, which cites the legal text for every rule. Data-centre market data for Romania.
- EUR-Lex (Official Journal of the EU)
- European Commission
- Romanian Ministry of Justice legislation portal
Not legal advice. Confirm each duty against the text itself.