November 2024
Adela Nuță was invited as a speaker and joined the well-rounded panel during the event recently facilitated by juridice.ro, a leading Romanian legal news platform and events organizer, titled “The gambling market in Romania: between regulation, over-regulation, and prohibition“.
Adela’s intervention focused on “The self-exclusion procedure in the General Data Protection Regulation (GDPR) context“.
Highlights of the presentation include:
- addressing the GDPR compliance responsibilities of gambling operators concerning self-exclusion under Romanian law (OUG 77/2009).
- A primary focus of her intervention was on establishing a solid legal basis for data processing in line with GDPR while ensuring strict adherence to data minimization and transparency principles. Operators are required to collect only essential data and provide clear, accessible privacy policies to inform data subjects.
- highlighting the imperative of respecting data subject rights—particularly access, rectification, and erasure—in the self-exclusion process.
- These rights must be addressed in a way that aligns with legal obligations under the relevant legislation, namely OUG 77/2009, carefully balancing individual rights with regulatory requirements. Notably, even when players have exercised their right to self-exclude, they retain full rights over their personal data, which must be respected, notwithstanding the restrictions on their access to gambling activities.
Adela’s intervention also underlined the essential need for the Romanian regulatory body for the domestic gambling industry, ONJN, to engage in proactive consultation with the National Supervisory Authority For Personal Data Processing, ANSPDCP. This collaboration, as Adela stressed, is not only to enhance the completeness of the existing legal framework but also to establish robust, consistent data processing measures across all data controllers, including ONJN itself.
Details about the event (in Romanian) are available HERE.
More details about our Gaming & Gambling regulatory practice are available HERE.
More details about our Data Privacy and Data Processing practice are available HERE.