JournalSeptember 26, 20268 min read

What a Romanian company website must show in 2026

Company details, the ANPC SAL pictogram (SOL no longer needed since 2026), cookies, personal data and the new online-shop rules: what Romanian law asks and what you risk.

Search for "ANPC pictograms website" and you will find dozens of articles telling you to put two images in your footer, SAL and SOL. Almost all of them date from 2022. Since then the EU SOL platform has closed, and since May 2026 ANPC, Romania's consumer protection authority, requires a single pictogram with a new link.

Below is the updated list, checked against the legislation on 26 September 2026. Each obligation comes with its legal basis. Where the law leaves room for interpretation, this says so too.

In short

  • An SRL or SA with a website must show its name, legal form, registered office, Trade Register number, fiscal code and share capital on it.
  • If you sell or promote products to consumers, put the ANPC SAL pictogram on the home page, linking to reclamatiisal.anpc.ro. The SOL pictogram and link are no longer needed.
  • Google Analytics, the Meta pixel and other statistics or marketing scripts should start only after the visitor consents, and the banner most likely needs a reject button.
  • If you have a form, you also need a privacy notice.
  • Online shops have extra rules, including a new withdrawal button, mandatory since 19 June 2026.

You can check all of this on your own site automatically, free, in under a minute.

Company details

Two laws apply here, and it helps to know which covers whom.

Company law (Law 31/1990, art. 74(5)) says it directly: if the company has its own website, it publishes on it the name, legal form, registered office, Trade Register number, unique registration code and the share capital (for an SA, the subscribed and paid-up capital). It applies to any SRL or SA with a website, whatever the site does. It does not apply to a sole trader (PFA) or an individual enterprise.

E-commerce law (Law 365/2002, art. 5) requires anyone providing online services to give direct contact details: phone, e-mail, address, plus the fiscal code and, where relevant, authorisations and professional body. The law requires the information to be accessible "easily, directly, permanently and free of charge"; showing it clearly and permanently on the site counts as enough.

In practice, the simplest place for all of it is the footer, so it appears on every page:

EXAMPLE SRL
Registered office: 10 Victoriei St., Târgu Jiu, Gorj County
Fiscal code: RO12345678 · Trade Register no.: J18/123/2020
Share capital: 500 lei
Phone: 0721 000 000 · E-mail: [email protected]

Two details that often slip:

  • The Trade Register number has a new format since July 2024. Companies registered after 26 July 2024 get a number like J2024000123008: the year, the number in six digits, the county code and a check digit. Old numbers such as J18/123/2020 remain valid and are converted only when the company registers certain changes, such as its name, registered office, main activity or legal form. J18/123/2020 would then most likely become J2020000123183.
  • The fiscal code has a check digit too. A code copied wrongly, or left over from a site template, shows up immediately in an automated check.

ANPC Order 449/2022 requires traders running sites that sell, take orders or advertise products and services to show the alternative dispute resolution (SAL) pictogram on the home page. So it is not only for online shops. A site promoting its services to consumers is probably covered too. A business working strictly with other businesses probably is not. Traders in sectors with their own dispute-resolution body, such as finance, are exempt.

Since 19 May 2026, under ANPC Order 270/2026, the rule is:

The SOL pictogram is no longer needed. The EU online dispute resolution platform closed on 20 July 2025 (Regulation (EU) 2024/3228), and the 2026 order removed it from the requirements. If it is still on your site, it sends visitors to a platform that no longer works. You can safely remove it.

If your SAL pictogram still links to the old address, anpc.ro/ce-este-sal, change the link. The order set no transition period, so it is unclear how ANPC treats old links, but the change takes a minute.

Law 506/2004 (art. 4(5)) allows storing information on a visitor's device only after they consent, except what is strictly necessary for the site to work.

Two things matter in practice:

  • Statistics need consent too. In June 2025 the Romanian data protection authority (ANSPDCP) fined a company 20,000 lei and ordered that cookies which are not strictly necessary, such as marketing or statistics cookies, be set only after consent. Romania has no exemption for Google Analytics.
  • A banner that only informs is not enough. In October 2025 ANSPDCP required a travel agency to show a clear, visible banner giving users a real choice. In practice this most likely means a reject button on the same screen as accept.

A quick test: open the site in a private window. If the banner appears before anything else and has a reject button, and Google Analytics does not start after rejecting, you are fine.

Personal data

If the site has a contact or sign-up form, the GDPR (art. 13) requires you to tell people, at the moment they give you their data, who processes it, why, for how long and what their rights are. Usually that means a privacy policy page, linked from the footer and next to the form.

A newsletter needs one more thing: the subscriber's express prior consent (Law 365/2002, art. 6). A box they tick themselves, not one ticked in advance.

If you run an online shop

The list is longer here. The main obligations:

  • Pre-order information (GEO 34/2014, art. 6): who you are, the total price with all taxes, delivery costs, payment and delivery arrangements, how complaints work.
  • The 14-day right of withdrawal (art. 9) and the model withdrawal form (art. 11 and Annex B).
  • The new withdrawal button, mandatory since 19 June 2026 (art. 11¹, added by GEO 18/2026): a visible function labelled "withdraw from the contract here" or something equally clear, followed by a confirmation step and an acknowledgement sent to the customer.
  • Contract terms made available so the customer can save them (Law 365/2002, art. 8).
  • Prices including VAT and, for discounts, the lowest price of the last 30 days shown next to the new price (Government Decision 947/2000, art. 4¹).

Accessibility, for larger shops

Since 28 June 2025, Law 232/2022 requires e-commerce services for consumers to be usable by people with disabilities, and the company to publish information on the service's accessibility in its terms and conditions or an equivalent document. The practical benchmark is WCAG 2.1, level AA.

Microenterprises are most likely exempt: fewer than 10 employees and turnover or a balance-sheet total of at most €2 million. A presentation site without online orders is not covered. We wrote more on what makes a website accessible.

What you risk

Only the fines we found in the text of the law:

What is missingFineAuthority
Company details on the site (Law 31/1990)2,500–5,000 leiANAF
Identification data (Law 365/2002)1,000–100,000 leiADR
SAL information (GO 38/2015)2,000–5,000 leiANPC
Cookie consent (Law 506/2004)5,000–100,000 leiANSPDCP
Pre-order information (GEO 34/2014)7,000–35,000 leiANPC
Withdrawal button (GEO 34/2014, art. 11¹)5,000–15,000 leiANPC
Prior price on discounts (GD 947/2000)5,000–30,000 leiANPC

For the missing SAL pictogram itself, the ANPC order has no sanctions article of its own.

How to check in five minutes

We built a free tool that reads your site like a visitor and tells you, in plain words, what is in order and what is not: company details (including the fiscal code's check digit), the ANPC pictogram and leftover SOL links, cookies, the privacy policy, whether Google and AI assistants can find you, and whether clients can call you from a phone.

Check your site now. We keep neither the address nor the report.

This article is orientation, not legal advice. The legislation was checked on 26 September 2026 against the consolidated texts on legislatie.just.ro. For your company's exact situation, talk to a lawyer.

Related work