{"id":320,"date":"2026-08-30T15:11:42","date_gmt":"2026-08-30T13:11:42","guid":{"rendered":"https:\/\/green-soft.ro\/analiza-de-risc-sau-fisa-de-securitate\/"},"modified":"2026-08-30T15:11:42","modified_gmt":"2026-08-30T13:11:42","slug":"analiza-de-risc-sau-fisa-de-securitate","status":"publish","type":"post","link":"https:\/\/green-soft.ro\/en\/analiza-de-risc-sau-fisa-de-securitate\/","title":{"rendered":"Risk analysis or safety data sheet? What changed in Law 333 of May 2026"},"content":{"rendered":"

Until May 2026, the answer to the question "do I need risk analysis?" was, for most companies, yes. Government Emergency Ordinance 37\/2026<\/a> changed this: it introduced a new chapter in Law 333\/2003, dedicated to the assessment of physical security risks (art. 491<\/sup>\u20134910<\/sup>), and divided the units into two categories with different obligations.<\/p>\n

If you manage a building, a hall, a hotel or a commercial space, it's worth five minutes to know which category you're in. The wrong document costs money for nothing; the lack of the right document costs during inspection.<\/p>\n

The two regimes, in brief<\/h2>\n

Physical security risk analysis<\/strong> remains mandatory for the units whose methodological rules establish minimum security requirements<\/em> \u2014 regarding security, burglar alarm systems and constructive-architectural characteristics (art. 492<\/sup>). It is prepared exclusively by an evaluator registered in the National Register of Physical Security Risk Assessors.<\/p>\n

Safety data sheet<\/strong> is the document of the other units. They implement measures according to their own needs, based on their own risk assessment, materialized in the sheet (art. 499<\/sup>). It doesn't require an authorized evaluator \u2014 but it doesn't exempt you from thinking seriously about security either.<\/p>\n

The practical difference: the first is a technical document made by a qualified third party, the second is a documented self-assessment. The confusion between the two is the most common reason why companies pay what they don't need or are left without what they need.<\/p>\n

How do you find out which category you are in?<\/h2>\n

Here's the awkward part. I do the remote work methodological rules<\/strong>, which establish who has minimum security requirements. The ordinance provides for the amendment of GD 301\/2012 within 90 days of its entry into force, and the format of the security sheet is to be established by order of the Minister of Internal Affairs.<\/p>\n

At the time of this article, these acts had not been published. Until they appear, existing regulations apply to the extent that they do not contradict the amended law \u2014 which means an area of interpretation in which it is best not to improvise on your own.<\/p>\n

What you can do concretely now:<\/p>\n