Personal Data Protection in Digitalized Public Administration: Challenges and Solutions in the Context of AI

Authors

DOI:

https://doi.org/10.61823/dpia.2026.2.554

Keywords:

personal data protection, artificial intelligence, public administration, GDPR, EU AI Act

Abstract

The rapid digitalization of public administration, accelerated by artificial intelligence (AI) technologies, promises enhanced efficiency and improved citizen services but simultaneously introduces profound risks to personal data protection. This paper examines these challenges within the context of Romania’s ongoing governance reforms, proposing actionable solutions aligned with the General Data Protection Regulation (GDPR) and the EU Artificial Intelligence Act. Through a qualitative research methodology combining EU-wide regulatory analysis with Romania-focused case studies, this study addresses key tensions between AI-driven automation, such as predictive analytics, automated decision-making systems, and biometric identification, and fundamental privacy rights. With Romania advancing its Digital Governance Framework amid EU mandates, unresolved issues including algorithmic bias, surveillance concerns, and enforcement gaps threaten both public trust and regulatory compliance. This analysis offers policymakers and practitioners practical pathways to balance technological innovation with robust data protection through Privacy by Design principles, enhanced oversight mechanisms, and transparent algorithmic governance.

References

AI in Romania: The potential for the public sector | McKinsey, https://www.mckinsey.com/industries/public-sector/our-insights/the-transformative-potential-of-ai-in-romanias-public-sector [accessed on: 05.02.2026].

Al-Kasasbeh Hisham Hamed, Albalawee Nasir, Al-Khawaja Haneen A., Qtaishat Ali Khaled, Legal Challenges of Using AI and Big Data in Public Administration: Administrative Liability, Data Protection, and Public Services Efficiency in International Journal of Sustainable Development and Planning, vol. 20, no. 6, June, 2025, pp. 2639-2650.

Belbe Anisoara, Implementation and Application of GDPR In Romanian Educational Institutions, in The Annals of the University of Oradea. Economic Sciences TOM XXXI, 1st Issue, July 2022, pp. 160-171.

Cavoukian Ann, Privacy by Design: The 7 Foundational Principles, Information and Privacy Commissioner of Ontario, Canada2011.

Data Privacy Management in Romania – Compliance & Law, https://responsum.eu/privacy-management-in-romania/ [accessed on: 05.02.2026].

European Commission, The Artificial Intelligence Act. Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024.

European Data Protection Board, Guidelines on automated individual decision-making and profiling for the purposes of Regulation 2016/679 (wp251rev.01), 2018.

Francu Cristian Constantin, Sava Ștefan, Global Perspectives on Digital and AI Legislation: A Comparative Study of Data Protection, AI Governance, and Healthcare Innovations with a Focus on Romania, DOI: 10.2478/picbe-2025-0191, Proceedings of the 19th International Conference on Business Excellence 2025, Sciendo, pp. 2469-2481.

Gellert, R. M. (2015). Understanding data protection as risk regulation. Journal of Internet Law, 18(11), 3-15.

National Supervisory Authority for Personal Data Processing, Annual Activity Report 2022, Bucharest, 2023.

Romania and the EU AI Act: Ready or Just Warming Up? https://eurocloud.org/news/article/romania-and-the-eu-ai-act-ready-or-just-warming-up/ [accessed on: 26.01.2026].

Romania Data Protection Laws of the World https://www.dlapiperdataprotection.com/index.html?t=law&c=RO [accessed on: 05.02.2026].

Romania Digital Transformation: Launch of Major Procurement for Government Private Cloud Migration

https://www.trade.gov/market-intelligence/romania-digital-transformation-launch-major-procurement-government-private [accessed on: 05.02.2026].

Romania – Digital Economy, Romania Country Commercial Guide at https://www.trade.gov/country-commercial-guides/romania-digital-economy [accessed on: 05.02.2026].

Selbst Andrew D. et al., Fairness and abstraction in sociotechnical systems, în Proceedings of the Conference on Fairness, Accountability, and Transparency, 2019, pp. 59-68.

Study: Romanians do not trust AI without human intervention, https://www.romaniajournal.ro/business/study-romanians-do-not-trust-ai-without-human-intervention-seven-out-of-ten-prioritise-data-protection/ [accessed on: 08.02.2026].

Thelle Martin H. et al., The opportunity of AI in public administration in Romania, Capturing the benefits of AI in public administration, An implement Consulting Group by Google, October 2024.

Wachter Sandra, Brent Mittelstadt, Luciano Floridi, Why a right to explanation of automated decision-making does not exist in the general data protection regulation, International Data Privacy Law, vol. 7, no 2, 2017, pp. 76-99.

Yeung Karen, Algorithmic Regulation: A Critical Interrogation (May 23, 2017). TLI Think! Paper 62/2017, Regulation & Governance, Forthcoming, King’s College London Law School Research Paper No. 2017-27, Available at: SSRN: https://ssrn.com/abstract=2972505 [accessed on: 25.01.2026].

Zarsky Tal, The trouble with algorithmic decisions: An analytic road map to examine efficiency and fairness in automated and opaque decision making, Science, Technology, & Human Values, vol. 41, no 1, 2016, pp. 118-132.

Downloads

Published

2026-09-09

How to Cite

Personal Data Protection in Digitalized Public Administration: Challenges and Solutions in the Context of AI. (2026). Discourse of Law and Administration, 2, 257-270. https://doi.org/10.61823/dpia.2026.2.554