
Wolf Theiss
INPLP member firm · Bucharest, Romania
Since starting out in Vienna over 60 years ago, Wolf Theiss has grown into one of the largest law firms in Central, Eastern and South-Eastern Europe (CEE/SEE). Wolf Theiss has been active in the CEE region since 1989 and in 2005 they established their Bucharest office which has since become a cornerstone of their regional presence. As one of the largest offices within the Wolf Theiss network, the Bucharest office continues to grow in line with Romania’s dynamic business environment. Romania has emerged as one of the EU’s most significant growth markets in recent years, offering a wealth of opportunities for both international companies and local entrepreneurs. The Wolf Theiss Bucharest team is poised to meet the needs of their clients in such an exciting market. They combine extensive local expertise with the resources of the wider regional network to deliver results-oriented and practical legal solutions. Their expertise includes banking and finance law, competition law, corporate law, dispute resolution, employment law, intellectual property and TMT, real estate law and public procurement. This breath of expertise combined with industry know how enables them to assist their clients across diverse sectors and legal challenges, both domestically and in complex cross-border, multi-jurisdictional transactions. They support both international companies and domestic entrepreneurs to capitalise on the Romanian market’s many opportunities. 4 Vasile Alecsandri Str., The Landmark, Building A, 4th floor 10639 Bucharest, Romania Adelina Iftime-Blagean is a Partner with the Romanian Wolf Theiss office and the main contact of the Employment practice in Bucharest. With over 20 years of expertise, she has coordinated a wide range of transactions and projects within the areas of data protection, employment, compliance, M&A, corporate and capital markets. Adelina has a particular focus on data protection issues in the context of employment projects and has advised on numerous cross-border and national projects with data protection implications, including compliance checks, vendor or seller due diligence processes, whistleblowing assessments, corporate governance implementation and unification projects, cross-border transfers of personal data, implementation of stock option plans, processing and transfer of sensitive personal data, such as medical data, as well as a wide range of other regulatory projects. Flavius Florea is a Counsel with Wolf Theiss Bucharest office and the main contact of the TMT, IP & Data Protection practice in Bucharest. He specialises on Technology Law, Intellectual Property and Data Privacy, having more than 15 years of experience in advising a broad range of clients, from high-profile international companies to vibrant start-ups. His areas of work include advising clients on the obligations of various Romanian and European privacy laws, data security, including in relation to the mandatory data breach notifications and handling difficult data breaches, as well as on the broad spectrum of internet-related issues, including on e-commerce, copyrights and media and advertising laws. Flavius also advises on related areas, including telecommunications, technology, online services, freedom of information, document retention and confidentiality. In the past years, Flavius has acted in complex projects for large corporate clients in connection to implementing their GDPR compliance programs with the purpose of maximising their compliance with the GDPR. Flavius has gained deep experience in several industries, including IT, consumer products, telecoms and automotive. Flavius holds a Master's Degree in Private Law from University of Bucharest, Faculty of Law and a Bachelor’s Degree in Law from University of Bucharest, Faculty of Law. He is a Certified Information Privacy Professional - Europe (CIPP-E) by the International Association of Privacy Professionals since 2017 and he is a member of the Bucharest Bar. Flavius is a regular speak
Representatives

Adelina Iftime-Blagean
partner

Flavius Florea
member
Contact
Wolf Theiss
4 Vasile Alecsandri Street, The Landmark, Building A, 4th Floor
10639 Bucharest, Romania
wolftheiss.comPublications
- Romania and the EU AI Act: Ready or Just Warming Up?Artificial Intelligence is reshaping industries and societies worldwide. As the European Union rolls out the AI Act, Romania is at the boiling point: Is it prepared to navigate this complex regulatory landscape? While the country boasts a vibrant tech ecosystem, aligning its legislative and institutional structures with EU standards still remains a challenge. This article explores the country’s current stance, challenges, and opportunities in aligning with Europe’s landmark AI regulation.4 December 2025
- Knowing Your Data Related Rights: Romania's Schengen Full AccessAfter more than a decade of anticipation, Romania has officially become a full member of the Schengen Area. As of 1 January 2025, land border checks with Romania and Bulgaria are a thing of the past, building on the earlier removal of air and sea border controls on 31 March 2024. This article explores the impact of Romania's full Schengen accession, with a special focus on the rights of data subjects in this new context.9 January 2025
- Romanian Whistleblowing Law. About Protecting Data while Fostering TransparencyRomania transposed the EU Whistleblowing Directive on 22 December 2022, via Law No. 361/2022 on the protection of whistleblowers in the public interest ("Romanian Whistleblowing Law"). This article explores key aspects of the law, providing an overview of how Romanian legislation navigates the intersection of the public interest (of having wrongdoings revealed), whistleblower rights and GDPR compliance.29 September 2023
- Data Act – one of the key regulation proposals for the EU data economy of the futureData is certainly a valuable commodity for the digital economy and society. As part of the 2020 European Data Strategy, the European regulators are working to develop new rules in order to ensure greater and fairer data flows and unlock the potential and value of data across all economic sectors in line with European values. The Data Act is designed to respond to these needs.19 December 2022
- PROCESSING COVID-19 VACCINATION DATA OF EMPLOYEES IN ROMANIA: OPTIONS AND EXPECTATIONSThe processing of COVID-19 related health data is certainly a hot and/or unsettled legal matter everywhere in the world. This article presents the Romanian status and expectations as of 28 December 2021.28 January 2022
- Data protection in teleworking context. Romanian perspectiveThe pandemic context has accelerated the use of telework and triggered a shift towards additional flexibility of work that will most likely continue and evolve in the next years. Complying with GDPR in a tele-working environment becomes even more difficult and requires extra efforts from companies. Considering the trend towards flexibility of work and globalization of the work force, companies will need to go the extra mile to remain competitive on the new labor market, including by assuming addtional risks and compliance efforts from a data protection perspective. This article presents the main data protection challenges a company may face when using telework.21 July 2021
- Romanian public authorities sanctioned for GDPR breachesTowards the end of 2020, the Romanian Data Protection Authority (ANSPDCP) disclosed on its website information regarding the sanctioning of two Romanian public authorities for GDPR breaches while processing personal data. This stands out as one of the first instances when the Romanian regulator applied sanctions to entities in the public sector. Moreover, the underlying facts are extremely similar.26 March 2021
- When use of chat apps and social media platforms backfire on companies and data subjects' rightsOn 17 December 2020, the Romanian Data Protection Authority (ANSPDCP) has published on its website a new administrative sanction in amount of EUR 100,000 against Banca Transilvania, a Romanian bank, grounded on the failure of the controller to observe the principle of integrity and confidentiality of personal data and to implement adequate technical and organizational measures in order to secure the processed data.29 December 2020
- Romanian DPA fines the lack of cooperation with the supervisory authorityThe Romanian Data Protection Authority ("Romanian DPA") has recently sanctioned three entities (two private companies and a homeowners association) for lack of cooperation with the supervisory authority, imposing on these entities administrative fines of EUR 2,000 (twice), respectively EUR 3,000. All three sanctions were announced during October 2020 on the website of the Romanian DPA.5 November 2020
- Body temperature readings and the Covid-19. What should we do? Short synopsis of the Romanian statusDuring the Covid-19 pandemic we received numerous and various questions from our clients regarding body temperature readings of employees (and visitors) and other more intrusive medical tests. While from an employment law perspective some of these are not so problematic and most of the times possible (while also looking of course at the specifics of the industry and employer), when it comes to data protection, things become very complicated. This brief concentrates on body temperature readings only.11 June 2020
- Romanian DPA published its activity report for 2019On the European Data Protection Day 2020 (i.e. on 28 January 2020), the Romanian DPA published (in Romanian and English languages) a brief statistical activity report for 2019.3 February 2020
- The role of Romanian courts in the protection of personal data in the post GDPR eraWhere does the role of the data protection authority (DPA) end and where the court takes priority? The relevant legal provisions are spread around the national laws and regulations, most of them being included in the laws regulating the organization of the Romanian DPA.12 March 2019
Join the network
Applications from qualified privacy practices are reviewed individually by the INPLP board.