Irina Vasile

Associate, CIPP/E
+40 21 201 1200

Practice areas



  • environmental issues in mergers and acquisitions
  • environmental and other permitting matters
  • waste management
  • environmental liability, including for historic pollution
  • sanitary, veterinary and food safety matters
  • compliance matters, including in case of polluting incidents and authorities’ controls
  • environmental related litigation

Data Protection and Privacy

  • processing employees’ data, including data sharing within the group for benefits programs and whistleblowing schemes
  • e-privacy matters, including commercial communications, cookies and similar technologies
  • cyber-security requirements
  • data sharing in mergers and acquisitions projects
  • regulatory compliance, including in connection with disciplinary procedures
  • data subject rights
  • processing and data transfer formalities
  • controls by the data protection authorities
  • contractual negotiations of data protection clauses
  • data protection impact assessments and legitimate interest assessments

Representative Cases and Transactions


  • assistance to one of the most important mining companies in Romania in a lawsuit filed against it by several Romanian NGOs in relation to the annulment of a decision upon which a revised environmental approval was issued
  • assistance to a global full-range supplier of solid wood and wood-based material in implementing the EU-mandated due diligence system required for operators who place timber and timber products on the market
  • day-to-day assistance in relation to environmental and sanitary veterinary matters for a large German retailer
  • advice to a private equity firm specialized in food and agribusiness investments in the intention of buying a group of ten Romanian companies active in the agricultural field, by assessing the targets’ compliance with environmental requirements as part of the due diligence process
  • advice to a distributor of pharmaceutical products on the implementation of radio frequency identification (RFID) in the pharmaceutical industry
  • assistance to a Finnish IT and telecom company in connection with electrical and electronic waste management

Data Protection and Privacy

  • assistance to a major ad tech company with respect to data subjects rights requests by conducting analysis and drafting the answers to be sent to the data subjects and, if applicable, to the data protection authorities, as well as providing day-to-day advice on all product related data protection aspects
  • assistance to a major data broker from the ad tech industry in ensuring data was collected in compliance with the relevant data protection requirements and negotiating on data protection and contractual provisions with its data suppliers
  • assistance to a large financial institution and its subsidiaries with conducting an audit of the processing operations within the group to assess compliance with GDPR requirements, drafting an audit report with the findings, preparing an action plan with recommended measures to be implemented by the group to ensure compliance and assisting with the implementation thereof by drafting or updating the relevant documentation
  • advice to a leading global provider of risk management, insurance and reinsurance brokerage on privacy and confidentiality obligations
  • advice to a leading global bank on the transfer of personal data outside of Romania and on archiving matters related to the liquidation of its Romanian branch

Selected credentials also include work prior to joining NNDKP.


  • University of Bucharest Law School, Law Degree
  • King’s College London, Intellectual Property & Information Law LLM

Memberships and Affiliations

  • Bucharest Bar
  • CIPP/E

Notable Contributions

  • “The law and practice of video monitoring” (Data Guidance, 2015) (co-author)