Foreign Direct Investment (FDI) | Legal Landscapes: Romania

Our colleagues Cătălin Grigorescu, Cristina de Jonge and Denisa Kopandi have contributed to the latest edition of the Legal 500: Foreign Direct Investment Country Comparative Guide. Their comprehensive analysis below provides an in-depth look at the evolving regulatory requirements within our jurisdiction.

1. What is the current legal landscape for Foreign Direct Investment Law in your jurisdiction?

Romania’s Foreign Direct Investment (“FDI”) screening regime is, at present, one of the most expansive and intricate in Central and Eastern Europe. The mechanics of the regime are straightforward in theory, but complex in practice. The legal foundation rests in the Government Emergency Ordinance no. 46/2022 (“GEO 46/2022”) and the related secondary legislation, which is establishing the framework for screening by the Foreign Direct Investment Screening Commission (“CEISD”) of foreign (non – EU) direct investments, EU and domestic investments, as well as new investments, that are deemed likely to affect security or public order.

As a rule, investments subject to examination and notification to CEISD are those (i) concerning the sensitive activity sectors provided by the Supreme Council of National Defence (“CSAT”) Decision no. 73/2012 (“CSAT Decision 73/2012”) and (ii) whose value exceeds the threshold of 2 million euros, these two conditions to be cumulatively met. The CEISD is the inter-institutional body subordinated to the Romanian Government responsible for examining investments, whose secretarial function is currently ensured by the Competition Council, the latter issuing also the authorisation decisions for the investments examined by CEISD and applying sanctions for failure to obtain authorisation for the investments. The investment rejection decision and the conditional authorisation decisions are currently issued by the Romanian Government, considering the opinion of CSAT.

Type of investments subject to FDI screening

Foreign (non-EU) direct investments, EU investments since December 2023, domestic investments, as clarified in December 2024, and new investments are all subject to FDI screening in Romania.

Crucially, the law expressly provides that EU investors subject to screening include Romanian entities and citizens who have realised or intend to realise an investment in Romania. Thus, the regime also applies fully to purely domestic transactions in which both the buyer and the seller are Romanian entities or individuals.

Although not always predictable for investors, new investments by foreign, EU, or domestic investors are also subject to FDI screening. A new investment is an investment in tangible and intangible assets related to starting the activity of a new company (i.e. the creation of a new site for carrying out the activity for which funding is requested, technologically independent from other existing units), expanding the capacity of an existing company (i.e. increasing the production capacity at the existing site due to unmet demand), diversifying the production of an company through products that were not previously manufactured (i.e. obtaining products or services that were not previously produced in that unit), or a fundamental change in the overall production process of an existing company.

Investments related to internal reorganisations or restructuring are also subject to FDI screening in Romania.

Conditions to be fulfilled by the investment to be subject to the FDI screening in Romania

The sectoral trigger: what counts as “sensitive”?

The sensitive sectors enumerated in the CSAT Decision 73/2012 are very broad, encompassing security of individuals and communities, border security, energy and transport security, security of supply systems for vital resources, critical infrastructure security, IT and communications systems security, financial, tax, banking and insurance activities security, production and distribution of weapons, ammunition, explosives and toxic substances, industrial security, disaster protection, protection of agriculture and the environment, and protection of state-owned companies’ privatisation or management teams.

In practice, this has led to a wide coverage of the FDI screening in Romania. The CEISD practice reveals, for example, investment screening being applied to the manufacturing of business footwear for men and women, no dual-use involved, under industrial security or meat production and distribution. Tourism activities have been screened, specifically the provision of business-to-business services, including hotel reservations, transfer bookings, car rental reservations, and group travel arrangements exclusively offered to travel agencies. Medical laboratory services have been scrutinised under the security of individuals and communities. Development and operation of a cloud platform designed to simplify data collection and automate workflow processes, including tools for creating and managing online forms, surveys and questionnaires, have been examined under the security of IT and communication systems. Ownership and operation of a business park have fallen under real estate development subject to security review.

Moreover, there are special provisions for the media and telecommunications sector regarding the applicability of the FDI screening. Investments in companies holding audio-visual licences or issuing publications with an average circulation of at least 5,000 printed copies per day during the previous calendar year, or operating web portals with a minimum of 10,000 views per month are subject to notification under the FDI regime regardless of whether the target group has a local entity, and such transactions undergo a public consultation process lasting at least 30 calendar days.

The investment value threshold: how should it be calculated?

Guidance on the method of calculating the value of the investment relevant for the assessment on whether the condition regarding the 2-million-euros threshold is met was given by the Competition Council’s Guidelines dated 30th of July 2025 (“Guidelines”).

The value of the investment represents the value of the funds made available by the investor, consisting of all considerations that have been or will be provided, directly or indirectly, in the context of the investment, including payments through cashless payment instruments, assets, shares, transfers of ownership, debt relief, compensation, services, or other in-kind considerations.

The Guidelines also provide certain rules for the calculation of the value of the investment based on the type of investment, the type of consideration from the investor and the stages of the investment. For example, where no price is paid, it is determined as the market value of the shareholdings or of the acquired assets established based on the acquirer’s own assessment, using market, accounting, or tax values, in that order, depending on the availability of each value, or based on valuation reports. If the transaction involves the conversion of a participation in equity interest previously acquired, the consideration includes the amount initially paid by the investor plus any other considerations related to the conversion. If the investment is made in multiple stages, the value of the investment is determined by cumulating the value of each stage. Also, when an investment is part of a multi-jurisdictional transaction, and the price for the undertaking or assets from Romania is not separately identified, the parties’ own valuations of the relevant undertaking or assets registered or located in Romania are used. If no such allocation or valuations of the price for Romania exist, the value of the investment is deemed equal to the total value of the multi-jurisdictional transaction.

Exceptionally, foreign direct investments that do not exceed the threshold of 2 million euros may still be subject to screening and approval by the CEISD if, by their nature or potential effects, they may impact public security or order or pose risks to them.

Submission of the application for FDI clearance

The application for FDI clearance must be submitted to CEISD by all foreign (non–EU), EU or Romanian investors who intend to perform investments in Romania, which meet the two cumulative conditions detailed above.

The application should be submitted based on a standard form, accompanied by the relevant evidence both in Romanian and English languages, on paper and in electronic format.

The investors must submit to CEISD together with the standard form a document or agreement that clearly confirms the intention to perform the investment and includes the essential elements of the transaction (such as the price, financing method, involved parties, and object of the investment), terms sheets or letter of intention signed by both parties being accepted.

The FDI screening fee is set at 10,000 euros, and it is due at the application submission and refunded if CEISD concludes the investment does not meet the screening criteria.

Procedural timeline: theory versus practice

The CEISD opinion to authorise, conditionally authorise or reject the investment is issued within 60 calendar days from the date the FDI clearance application is declared complete, containing all information and documents requested for the examination of the investment.

CEISD should issue the confirmation for completeness of the FDI application within 7 days as of the FDI application registration, but such confirmation does not prevent CEISD from requesting further information at any time, which will suspend the terms within the screening procedure until the requested information is provided. Unless the preliminary information is found to be inaccurate or incomplete, the application becomes complete when registered with CEISD. This “stop the clock” mechanism—where the timer freezes whenever the Commission requests additional information—means that in complex transactions, the timeline can extend significantly.

If deemed necessary, CEISD could request opinions from other authorities, which shall reply within a term of a maximum of 20 days or from the European Commission, for which no term for submitting the request or for reply is provided.

The approval opinion of CEISD shall be communicated to the Competition Council within 5 days as of its issuance, which shall issue the decision for approval of the FDI within a maximum of 10 days as of receipt of the CEISD opinion in case of EU and domestic investments or a maximum 30 days as of receipt of the CEISD opinion in case of foreign or new investments. The Competition Council must communicate its decision to the applicant within a maximum of 45 days from its issuance.

Thus, the authorisation decision shall be issued and communicated within 120 days as of the moment the FDI filing is complete for EU and domestic investments and 140 days as of the moment the FDI filing is complete for foreign and new investments. However, as mentioned before, these terms would be suspended and consequently prolonged if CEISD deem additional information is necessary for performing its examination.

In practice, the FDI clearance decisions for the unproblematic investments are issued within 2 months from the moment they are declared complete as regards EU and domestic investments (including new investments) and 3 months from the moment they are declared complete as regards foreign (including new) investments.

The deadlines are higher if CEISD initiates a detailed examination, for which no maximum deadline is provided and requests the opinion of CSAT on the investment, which shall provide it within 90 days as of its request or if CEISD issues a conditional approval opinion or a rejection opinion, in which cases the Romanian Government issues the decision for conditional approval or rejection of the investment.

Sanctions

Investors who intentionally or negligently implement an investment subject to FDI screening without obtaining authorization or an investment subject to conditional authorization without observing the conditions, or who provide inaccurate, incomplete or misleading information could be sanctioned by fine reaching up to 10% of total worldwide turnover from the last financial year and for new companies fine between 10,000,000 lei (2,000,000 euros) and 50.000.000 lei (10,000,000 euros).

Moreover, any commitments, agreements, or contractual clauses that directly or indirectly result in a foreign direct investment, an EU investment, or a new investment shall be null and void when the investment in question has not been authorised from an FDI perspective.

Volume and pattern of notifications

The regime’s practical impact is substantial: 471 notifications were filed in 2024, driven largely by “formalistic” filings for non-sensitive transactions. This volume creates an administrative burden whilst generating uncertainty for investors who cannot easily predict whether their transaction requires notification.

2. What three essential pieces of advice would you give to clients involved in Foreign Direct Investment matters?

First: Always ask the FDI question—even when the transaction looks purely domestic or purely commercial

The most important lesson from Romania’s extensive FDI landscape is: never assume that screening is irrelevant simply because there is no foreign buyer, no strategic asset, or no obvious security angle. A transaction between two Romanian companies, a greenfield investment by a Romanian entrepreneur, or a series of equipment purchases in a regulated sector may all trigger the FDI regime depending on the circumstances. Even real estate acquisitions have been deemed subject to FDI screening when meant to be used for a project falling under the sensitive sectors.

Given the absence of guidelines to define activities falling within sensitive sectors, uncertainty has created a challenging environment. The practice of the authority shows that authorisations are required for activities that would not intuitively fall within a classic national security paradigm.

The practical lesson is that FDI analysis has become a standard item on the transaction checklist in Romania, alongside merger control or sectoral permits. Budget and allocate time in your transaction timeline for screening, even in transactions that appear purely commercial or purely domestic.

Do not rely on intuition about what is “strategic” or “sensitive”—and prepare for procedural absurdities. Under the current framework, the trigger is not limited to defence, energy, or critical infrastructure in a narrow sense. Instead, it extends to broadly defined economic ecosystems: healthcare, IT, data, agriculture, transport, industrial production, and many others.

The only safe approach is performing a structured legal assessment to check if the investment is subject to FDI clearance, based on the actual activities involved, the value of the investment, and the way the transaction is structured—not on labels or assumptions.

Beyond substantive scope, investors must understand aggregation mechanics, in case of transactions implemented in several stages or successive acquisitions, which could be deemed a single investment.

Second: Structure and timing matter more than ever—leverage specialised experience

Because the FDI review timeline is not fully predictable, it is critical to map all steps of the operation from an FDI perspective, identify early whether the filing for FDI clearance is necessary, if the risk to be concluded that the investment affects the public security or order exists, and build FDI clearance into the transaction calendar and conditions precedent.

The distinction between investments that are subject to FDI screening and investments which are not is highly technical, and it is advisable to be assessed by practitioners who have real case experience with the authority and with its informal practice. Since the law is unclear and not all decisions are public, expertise as regards the views and practice of CEISD is of great importance, saving time and money whilst avoiding compliance risks.

Third: Do not undertake any measures for the implementation of the investment before obtaining FDI clearance – risk of gun jumping

In order to avoid the heavy sanctions described above, it is essential, before obtaining the FDI clearance decision, not to take any measures for the implementation of the investment, such as starting the operation of the objective, exercising the voting rights acquired for the appointment of members to the management bodies of the company, for the adoption of the company’s income and expenditure budget, for the adoption of the investment plan of the acquired company or for the adoption of the company’s business plan, the entry of the acquired undertaking into another/new market, determined by the business strategy of the investor, the exit of the acquired undertaking from the market in which it operates, a change in the business activity of the acquired undertaking, changing the name of the acquired company, restructuring, closing or dividing the acquired company, selling assets belonging to the acquired company, dismissal of employees of the acquired company, conclusion or termination of long-term contracts or other important agreements concluded with third parties or listing of the acquired company on the stock exchange.

Also, do not make payments as part of the investment before obtaining the official FDI clearance decision, even if the paid amount is just a part of the value of the investment and is under the 2-million-euros threshold.

3. What are the greatest threats and opportunities in Foreign Direct Investment law in the next 12 months?

The main threats: uncertainty and regulatory expansion

The most significant threat for the next 12 months is continued uncertainty arising from three converging elements: the breadth of the current regime which already covers a very wide range of activities, the limited transparency of decisional practice as only part of CEISD decisions is public, and the draft amending legislation released for public consultation in December 2025, signalling possible extension of the FDI screening scope to acquisitions of assets “of any kind” in certain sectors.

The draft law introduces new definitions of the sensitive domains where simple asset acquisition are deemed likely to affect security or public order, including critical and advanced technologies (artificial intelligence, robotics, semiconductors, cybersecurity, aerospace, defence, energy storage, quantum, nuclear, nanotechnologies, biotechnologies), critical infrastructure in specific domains (energy, water, transport, vital resource supply networks, health, communications, mass media, financial-banking, insurance, data processing or storage, aerospace infrastructure, defence infrastructure, land and real estate essential for functioning of the above), the pharmaceutical sector, and the defence sector and the defence industry. The proposal to extend screening to any acquisition of assets of any nature, including intangible assets such as intellectual property rights, licences, source code, data sets or certain commercial contracts, regardless of the existence of a link with a company, risks transforming FDI examination into a generally applicable instrument to all current economic operations.

If this trajectory continues without careful calibration, there is a risk that the FDI mechanism could be perceived not as a targeted security filter but as a general administrative clearance layer for large parts of the economy, increasing transaction costs, lengthening timelines, and introducing friction into ordinary investment decisions.

As per the draft law, it is deemed to result in a single investment two or more interdependent transactions that are performed during a period of one year by the same natural and/or legal person or between the same persons, if the value of each individual transaction is below the 2 million euros threshold, the FDI filling obligation arising when the cumulative value of the investments reaches the 2 million euros threshold. As a result, the FDI clearance obligation might become incident for certain investments which currently are not subject to FDI screening.

The main opportunities: maturity, clarification, digitalisation and professionalisation

Romania’s FDI system is still young. As more practice accumulates, more guidance is issued, and more dialogue takes place between authorities and the business and legal communities, there is a real chance for the regime to become more predictable, more structured, and more aligned with its core purpose: protecting genuinely strategic interests without unnecessarily burdening ordinary economic activity.

The FDI draft law also brings significant improvements to the Romanian FDI screening system.

It is to be noted that a dedicated IT application developed by the Prime Minister’s Chancellery in collaboration with the Special Telecommunications Service (“STS”) will be implemented. This represents a genuine modernisation opportunity, highly necessary in the current context, where communication with CEISD and tracking of the FDI screening procedure status is very difficult for investors and practitioners, as no dedicated communication channel is established directly with the case handlers. A digital dashboard could, in theory, allow investors to track application status in real time and see exactly where the file stands.

Also, the procedural timeline is envisaged to be reduced, resulting in real efficiency gains, provided the “stop the clock” mechanism does not negate these improvements in practice.

The screening fee would be reduced from 10,000 euros to 5,000 euros.

During the public consultation on the FDI draft amending legislation, the business environment also insisted on the increase of the 2 million euros threshold, and hopefully, this proposal will also be considered by the legislator.

Whilst these amendments are not yet in force, they are a strong indicator of the direction of authority policy: broader substantive scope, shorter theoretical timelines, enhanced digitalisation, lower screening fee and continued application to domestic investors.

4. How do you ensure high client satisfaction levels are maintained by your practice?

We always have a business-oriented approach when assessing the necessity of obtaining FDI clearance for an investment and preparing the FDI clearance application, despite extensive coverage of the FDI screening obligation in Romania.

In the Romanian FDI context, client satisfaction is primarily about speed, predictability, and practical risk management in transactions that are almost always under time pressure.

Process optimisation and technology

We have optimised our practice extensively. This allows us to rapidly screen large transaction document sets, identify relevant activities, assets and transaction steps, cross-check them against FDI requirements derived from both legislation and past cases, and prepare notifications and supporting documentation in record time without sacrificing accuracy.

Experience and pattern recognition

The Romanian FDI regime is not fully codified in terms of outcomes. Many distinctions are not specifically provided in the legal framework, but emerge from the authority’s approach in relation to the interpretation of certain sectors, the specific transaction structures, and certain fact patterns.

Having worked on a large and diverse number of FDI cases, we are able not only to advise clients on the applicable legal provisions but also to assess when a filing is genuinely necessary, when a non-filing position is defensible, and how to structure and present a case in a way that is aligned with the authority’s actual concerns and approach.

The success of an FDI clearance application in Romania is critically dependent on having substantial experience with FDI filings and the authority’s practice.

Strategic compliance

Our objective is not to turn FDI into a mechanical box-ticking exercise. Sometimes the best service to a client is to confirm that a filing is needed and manage it efficiently, but sometimes it is also to explain, with solid arguments, why a filing is not required and why a transaction can proceed without adding unnecessary regulatory layers.

In both cases, the value lies in clear, reasoned, and experience-based advice.

5. What technological advancements are reshaping Foreign Direct Investment law and how can clients benefit from them?

The authority’s side: digitalisation of the process through the STS platform

Romania is to make a major step forward by implementing a dedicated digital platform for managing business flows related to FDI filings. The IT application will be developed by the Prime Minister’s Chancellery as owner and operational administrator in collaboration with the STS, as developer and technical administrator.

This platform is a secure infrastructure developed in collaboration with STS, Romania’s specialised agency for secure government communications. In time, it should standardise submissions, reduce formal errors and back-and-forth, and improve traceability and transparency of the procedure.

STS will be empowered by the relevant institutions regarding personal data processing through the IT application, with personal data storage periods. For investors, this enhanced security means that data filed—often including extremely sensitive trade secrets, IP details and beneficial owner structures—will be stored on state-controlled secure servers rather than commercial cloud storage, addressing data leak concerns.

A digital dashboard could allow investors to track application status in real time, seeing exactly where the file stands. For investors, this will mean more procedural clarity, even if the substantive assessment remains complex.

The advisors’ side: advanced document processing and workflow optimisation

Our law firm has begun using advanced technology extensively, which helps tremendously with drafting, document processing, and delivering faster results for clients.

We implement tools to scan transaction documentation, identify activities that may fall within sensitive sectors, rapidly map ownership structures to identify ultimate beneficial owners, and prepare comprehensive application submissions that anticipate likely authority questions. This allows us to understand complex transaction structures, identify FDI-relevant elements, and prepare high-quality, coherent and well-structured filings in a fraction of the time that purely manual review would require.

This technological leverage directly translates into lower risk, better timing control, and greater overall transaction certainty for clients. In transactions where time pressure is constant and Romania lacks timeline predictability; process acceleration is transformative.

Through detailed searches from both public sources and rapid review of client documentation, we reach the point where we can complete notifications faster without sacrificing accuracy. Through automating aspects of our work, we observe patterns and can pre-emptively prevent problems before they become compliance breaches.

Practical client benefits: speed, accuracy, cost-efficiency

The combination of governmental digital infrastructure and private-sector technological adoption creates an ecosystem where compliance becomes streamlined rather than obstructive, allowing genuine focus on transactions that merit security scrutiny whilst expediting those that do not.

For clients, this means faster market entry through reduced preparation time for FDI applications, lower compliance costs through process optimisation, enhanced accuracy through consistency checks that prevent filing errors that trigger information requests, proactive risk management, and strategic advantage through understanding likely CEISD responses, allowing better negotiation positioning.

We are moving towards more efficient compliance processes, where sophisticated tools on the investor’s side can interface with the forthcoming STS platform to streamline notifications, potentially reducing routine filing preparation time. This allows our legal practice to focus not on mechanical document preparation, but on strategic advice: interpreting risk assessments, advising clients whether to restructure transactions to eliminate sensitive assets, and ensuring smooth passage through the FDI screening process.

ANNUAL FDI REPORT REGIME ROMANIA 2026

The GDPR Procedural Regulation – New Chapter in GDPR Enforcement

The Regulation (EU) 2025/2518 laying down additional procedural rules on the enforcement of Regulation (EU) 2016/679 (hereby referred to as the “Regulation) entered into force on the 1st of January 2026, and will become effectively applicable starting from 2 April 2027. The Regulation introduces a new set of procedural rules governing the enforcement of the Regulation (EU) 2016/679 (the “GDPR“) in cases involving cross-border data processing activities.

 The GDPR establishes a system in which a single lead supervisory authority oversees cross-border processing through the “one-stop-shop” mechanism. In practice, however, this model has frequently been undermined by diverging national procedural rules, leading to delays and legal uncertainty. Against this backdrop, the new Regulation seeks to overcome these structural shortcomings by streamlining procedures and strengthening the effectiveness of cross-border enforcement.

Briefly, this Regulation is purely procedural, given that it seeks to reinforce the procedural framework for GDPR enforcement in cross-border cases, while enhancing clarity and cooperation among EU authorities when handling such matters. It is also important to note that the obligations under the GDPR, including the criteria for fines (as set out in Article 83 GDPR), remain unchanged; the Regulation solely introduces stricter deadlines, harmonised complaint requirements, and strengthened defence rights for data subjects and relevant organisations.

The key developments brought by the Regulation can be divided into three major areas, respectively:

 I. Harmonisation & Unification of the rules for the admissibility of complaints

 While, under the GDPR, the requirements for filing a complaint have so far varied significantly from one Member State to another, the new Regulation introduces certain significant novelties. In this respect, the Regulation puts an end to this fragmented approach, and establishes strict and uniform requirements for the admissibility of cross-border complaints.

For example, from now on, a complaint will only be admissible if it contains specific information, such as: (i) the complainant’s contact details; (ii) information facilitating the identification of the data controller or the data processor subject of the complaint; as well as (iii) a specific description of the alleged infringement of the GDPR’s provisions.

Why is this important in practice? The legal wording appears to set out an exhaustive list of admissibility requirements. As a result, no additional information may be requested beyond what is expressly required by the Regulation for a complaint to be considered admissible by the supervisory authority.

II. Introduction of stricter deadlines for authorities & Speeding up the processes

 Under the GDPR, there were no binding deadlines for concluding cross-border investigations, allowing cases to remain unresolved for several years. The Regulation introduces stricter deadlines for supervisory authorities and efficiency mechanisms, such as:

The Early Resolution stage: Article 5 of the Regulation establishes a procedure for early resolution of complaints related to cross-border data processing under the GDPR, specifically when the complaint concerns data subject rights, in accordance with Chapter III of the GDPR. In essence, Article 5 allows supervisory authorities to close cross-border complaints quickly when the issue has already been remedied, while preserving the complainant’s right to object and the authorities’ enforcement powers.
New deadline for issuing decisions: the lead supervisory authority (”LSA”) must, in principle, submit a draft decision within 15 months of confirmation of its competence, under the provisions of Article 60 (3) GDPR. This period may be extended only once, for a maximum period of 12 months, and in exceptional cases.
The “Anti-Bureaucracy” Clause: in cases where the LSA can form a preliminary view on the main issues in an investigation, which does not raise reasonable doubts, the LSA may resort to the Simple Cooperation Procedure, as set out in Article 6 of the Regulation, to streamline the process.

Failure to comply with the deadlines set out by the Regulation does not, in itself, invalidate procedural steps or final decisions. However, observance of these time limits could be relevant in assessing whether a supervisory authority has failed to act in handling a complaint, which may entitle the entitled parties to seek an effective judicial remedy under Article 78 GDPR.

III. Strengthening the rights of defence

The Regulation significantly strengthens procedural guarantees for controllers and processors under investigation, by establishing the so-called “right to be heard”. Thus, the focus is on the right to be heard before a final decision is made; thus, a decision issued by an LSA seems to be now more precisely “scratched“, as follows:

Outlining Preliminary findings: in case the LSA intends to establish an infringement, it must first draw up “preliminary findings” concerning the respective infringement. This document must contain all the facts, evidence, and legal assessment, as well as the corrective measures (such as fines) that are being considered (Article 19 of the Regulation).
Exercising the right to be heard: after notification of the preliminary findings, the party under investigation is given a minimum of three and a maximum of six weeks to respond in writing (Article 20 of the Regulation).
Adoption of the final decision: if, after the draft decision is shared under Article 60(3) GDPR, no supervisory authority raises an objection within the applicable time limits provided by the Regulation, the LSA must, within one month: (i) adopt the final decision under Article 60(7) or Article 60(9) GDPR; and (ii) notify that decision to the controller’s or processor’s main or single establishment, as applicable. (Article 21 of the Regulation)
Right to access the administrative file: parties under investigation are now expressly granted the right to access the administrative file, subject to the protection of trade secrets and confidential information and the right to receive preliminary findings setting out the alleged infringements and the corrective measure the LSA considers using (Article 24 of the Regulation). The administrative file includes all documents and evidence gathered by the lead and concerned supervisory authorities, whether inculpatory or exculpatory. It excludes internal communications within a supervisory authority.

 Conclusion

The Regulation marks a new step in the evolution and strengthening of GDPR enforcement, further refining how the GDPR is applied in practice, from a procedural point of view. While it enhances legal certainty for organisations, it also requires increased legal agility due to stricter and shorter deadlines for responding to allegations.

Having said that, the Regulation replaces fragmented national rules with a unified, time-bound framework, ensuring more efficient, predictable, and transparent GDPR enforcement across the entire European Union.

Supplier payment fraud in Slovakia

supplier payment fraud is basically a situation when the company misleadingly sends money to someone else, not the supplier or when the company pays for nondelivered goods or services.

In practice, we see these situations happening repeatedly. As such, we want to provide you with a brief overview of the types of supplier frauds that we see in Slovakia and what can be done from a legal perspective in a subsequent insolvency.

Read the article by Eurofenix, written by our Slovak partners, Martin Provazník.

bpv Huegel advises ISS Austria on the acquisition of the family-owned Franye group

19 December 2025. bpv Huegel advised ISS Austria, which is part of the international ISS Group and the domestic market leader for facility services, on the acquisition of the Austrian Franye group. Focusing on air conditioning and building technology, the group generated revenues of around EUR 25 million in the 2024 financial year and employs approximately 150 people.

A bpv Huegel team led by Thomas Lettau (Partner and Co-Head of the Corporate/M&A department) conducted the legal due diligence for ISS Austria. The team also assisted with structuring the transaction and negotiations, prepared the transaction documents, and advised on the merger control aspects of the transaction.

bpv Huegel regularly advises ISS Austria on M&A transactions, most recently on the acquisition of med-serv gmbh, a company specialising in infrastructural facility management in healthcare facilities.

Press release

bpv Huegel expands its Corporate/M&A and Private Equity practice with Michal Dobrowolski as new partner

Michal Dobrowolski (45) has about 20 years of transaction experience in M&A and private equity. bpv Huegel continues its strong, dynamic growth in M&A and private equity with this team expansion.

Vienna, 04 December 2025. bpv Huegel will strengthen its Corporate/M&A and Private Equity practice from January 2026 with the addition of Michal Dobrowolski. With Michal, the firm gains an experienced M&A and private equity specialist from Freshfields. He brings in-depth experience in significant and complex international M&A and private equity transactions, as well as venture capital investments.

His expertise also includes transactions in the US, Asia and Africa, with a primary focus on Europe (DACH) and CEE. Michal’s practice covers all major industries, with a particular focus on private equity, the energy and telecoms sector, as well as real estate and carve-out transactions.

His arrival underscores bpv Huegel’s strategic positioning as one of the leading firms for high-profile national and international transactions.

Michal brings tremendous transactional strength and an international focus as seasoned advisor. With him on board, we are consistently continuing our highly dynamic growth in M&A and private equity,” says Christoph Nauer, Co-Managing Partner of bpv Huegel.

bpv Huegel is a transaction powerhouse with a unique offering in tax and antitrust/merger control, which are of particular relevance to transactions. I look forward to working with the team to further expand its international focus,” adds new Partner Michal Dobrowolski.

Michal Dobrowolski holds a doctorate (Dr. iur.) from the University of Vienna. He is admitted to practice in Austria (since 2009) and as a solicitor (England & Wales) (since 2022/23). Michal Dobrowolski is the author of various publications on corporate law matters.

He advises in German, English and French as well as Polish (second native language), a valuable skill for his transactional work in CEE. Michal Dobrowolski worked at Freshfields in Vienna, about 20 years (since 2006), including over 10 years as counsel.

Press release

bpv Huegel advises NÖM AG on strategic partnership with Vorarlberg Milch

The law firm bpv Huegel provided comprehensive support to NÖM AG during its merger with Vorarlberg Milch.

26 August 2025. As part of the transaction, NÖM AG is acquiring the production facility of Vorarlberg Milch GmbH in Feldkirch, which will be managed as part of the NÖM Group in future. At the same time, Vorarlberg Milch eGen is acquiring a direct 3% stake in NÖM AG and will be represented on the Supervisory Board.

The transaction has already been approved by the Federal Competition Authority. The majority shares in NÖM AG remain unchanged with Raiffeisen-Holding NÖ-Wien reg. Gen via Niederösterreichische Milch Holding GmbH and with MGN Milchgenossenschaft Niederösterreich reg. Gen.

bpv Huegel was responsible for structuring the transaction, conducting due diligence, drafting and negotiating the agreements, and handling the merger control proceedings.

The partnership between NÖM AG and Vorarlberg Milch represents a significant step forward for the Austrian dairy industry. We are pleased to have supported NÖM AG in this strategic development,” said Christoph Nauer, Co-Managing Partner at bpv Huegel.

Press release

bpv Huegel advises CPI Europe on the sale of the Vienna Marriott Hotel

The international sales process for the renowned Vienna Marriott Hotel at Parkring Vienna has been successfully completed with its acquisition by an international consortium of investors.

Vienna, 01 July 2025. bpv Huegel provided comprehensive advice to CPI Europe group (S IMMO) on the sale of the Vienna Marriott Hotel to an international consortium of investors. As part of its strategic realignment, CPI Europe is selling the property at Parkring 12a and the hotel business.

The transaction was implemented through share deals and involves the iconic Viennese hotel property, a large-scale, mixed-use inner-city property, as well as the hotel operating company. The transaction value amounts to over EUR 100 million. The closing for the sale of the real estate companies took place on 27 June 2025. The closing for the hotel operating company is scheduled for January 2026.

The buyer is a joint venture between Evientro Ltd and London-based Landfair European Dislocated Opportunities SCSp, which specializes in liquidity solutions in the European real estate market.

Almost exactly 40 years after its opening on 1 July 1985, one of Vienna’s most famous hotels is changing owners. The hotel, with over 300 rooms and suites, was the first Marriott hotel in the German-speaking region. The hotel will continue to be operated by Marriott International under a long-term management agreement.

The transaction is one of the most significant hotel sales in Vienna in recent years. We are proud to be supporting CPI Europe on this complex real estate and corporate transaction,” said Christoph Nauer, partner at bpv Huegel and co-lead on the transaction.

bpv Huegel’s advisory services covered the international bidding process, complex corporate structuring, drafting and negotiation of transaction agreements, and tax issues. The bpv Huegel team was jointly led by Christoph Nauer (Corporate/M&A), Dominik Geyer (Real Estate) and Roland Juill (Corporate/M&A), and included Nicolas Wolski (Tax Law), Paul Pfeifenberger (Real Estate, Labor Law), Patrick Nutz-Fallheier (Corporate/M&A), Tim Pasternak (Corporate/M&A) and Gerhard Fussenegger (Antitrust Law).

The buyer’s advisors included SAXINGER (lead counsel to the buyer joint venture), AKELA (co-counsel for acquisition financing on the buyer side), Binder Grösswang (merger control on the buyer side), DLA Piper (legal advisor to the buyer in Germany and Luxembourg), Wolf Theiss (legal advisor to the financing bank, UniCredit Bank Austria AG) and BDO Austria (tax law buyer), which also advised on valuation issues relating to the transaction.

The transaction was facilitated by hotel real estate specialist Christie & Co, who acted as advisor and exclusive broker.

Press release

bpv Huegel advises RWA on the sale of its share in AUSTRIA JUICE to AGRANA

Vienna, 03 June 2025. bpv Huegel successfully advised RWA Raiffeisen Ware Austria Aktiengesellschaft (RWA) on the sale of its share in AUSTRIA JUICE GmbH to AGRANA Beteiligungs-Aktiengesellschaft.

AGRANA already holds a share in AUSTRIA JUICE and will hold 100% in the company following the acquisition of RWA’s share in AUSTRIA JUICE. AUSTRIA JUICE is a major manufacturer of fruit juice concentrates with headquarters in Kroellendorf (Lower Austria) and 13 production sites in Austria, Germany, Hungary, Poland, Romania, Ukraine, and China. The company employs around 1,000 people in total. Its turnover amounts to around EUR 330 million.

bpv Huegel already advised RWA on the establishment of the joint venture with AGRANA in 2012.

“We are proud to have been at RWA’s side from the founding of the AUSTRIA JUICE joint venture until its exit more than 13 years later,” said Thomas Lettau, partner and co-head of the Corporate/M&A practice group at bpv Huegel.

The bpv Huegel team was led by Thomas Lettau and also included Christoph Nauer, Nicolas Wolski, Anna Zirkler, Astrid Ablasser-Neuhuber and Gerhard Fussenegger.

AGRANA was advised by Schoenherr.

The transaction is subject to approval by the relevant competition and investment control authorities.

Press release