Data protection in internal investigations in Romania: balancing GDPR and corporate compliance

Internal investigations have become a structural component of corporate governance in Romania, and data protectionconsiderations now sit at the centre of every such process. Whistleblowing reports, fraud suspicions, regulatory audits and misconduct reviews require companies to collect and analyse employee information while ensuring full compliance with GDPR and Romanian data protection law, primarily Law no. 190/2018. […]