Romania Extends Cybersecurity Regulation to Energy Distribution and Transport

The new law extends the regulatory framework to energy distribution and transport, introducing DNSC as the competent authority and creating the basis for recognizing cybersecurity costs in energy tariffs.

Mădălin Borș, Vice-President of the Committee for Information Technology and Communications, emphasized that cybersecurity is no longer just about procedures and administrative obligations, but requires concrete measures, technologies, and the ability to intervene in the face of threats.

Operators will need to develop their own cybersecurity strategies, and the law introduces the possibility of recognizing cybersecurity costs in future distribution tariffs, allowing investments in protecting energy infrastructure to be integrated into cost recognition mechanisms.