Romania Enacts Law to Protect Ethical Hackers in Cybersecurity

• •Romania's new law protects ethical hackers from prosecution when reporting vulnerabilities.
• •The legislation clarifies the distinction between cybersecurity research and criminal activity.
• •The law aims to enhance national cybersecurity through better cooperation among state institutions.

On July 6, 2026, Romania promulgated a law aimed at protecting ethical hackers who identify and report cybersecurity vulnerabilities in good faith. The legislation, championed by USR MP Cristina Prună and PNL MP Eduard Mititelu, establishes a legal framework that distinguishes cybersecurity researchers from cybercriminals. It modifies certain provisions of the Criminal Code, allowing ethical hackers to operate without fear of prosecution when acting responsibly. The law is intended to bolster national cybersecurity by enabling talented individuals to contribute to the identification of vulnerabilities. It does not legalize cyberattacks or protect malicious activities. The National Cyber Security Directorate will work with a committee of relevant authorities to enhance incident response and information sharing. This law positions Romania among countries that recognize the importance of responsible vulnerability reporting.