Since 17th November 2004, the Romanian parliament has passed a new law concerning the processing of personal data and the protection of privacy in electronic communication in Romania. The law establishes the necessary legal framework, and in fact, is a translation into Romanian legal terms of the Directive 2002/58/EC of the European Parliament and of the Council. This step is part of the more broader Romanian accession to European Union (due by 2007).
I believe that the law will have a favorable impact on the on-going trend of outsourcing of IT services to Romania, as it creates a favorable legal environment for data processing, allowing foreign companies to operate under similar laws existent in the European Union, while making use of the lower costs available in Romania.