Law no. 190/2018 for the application of Regulation (EU) no. 2016/679 regarding data protection has been published in the Official Gazette no. 651 from 26 July 2018 and has entered into force starting with August 1st.
The GDPR is already applicable in the EU member states since 25 May 2018. Romania was also expected to show how it will regulate in the fields where the GDPR permits derogations through national norms, such as in the context of employment, the use of genetic, biometric and health related data or in the case of processing for journalistic purposes.
The main provisions of the legislation are here.