Romania has adopted a law that prohibits the acquisition and use, by public authorities, of cyber security software products and services from the Russian Federation, informs the National Cyber Security Directorate (DNSC).The law on the protection of information systems of public authorities and institutions in the context of the invasion launched by the Russian Federation against Ukraine entered into force on December 14, from the moment of publication in the Official Journal. The draft law was initiated by the Ministry of Research, Innovation and Digitization (MCID) and was voted by the Parliament on November 23, 2022.According to DNSC, the law establishes the legal and institutional framework for the prohibition of the acquisition and use by public authorities and institutions of cyber security and IT security software products and services originating directly or indirectly from the Russian Federation, from an economic operator under the direct or indirect control of a natural or legal person from the Russian Federation, from an economic operator whose capital is constituted with participation coming directly or through companies interposed in the Russian Federation or whose administrative bodies include persons from the Russian Federation.The law refers to all networks and computer systems that manage classified information, owned by public and private legal entities located on the territory of Romania, with the exception of those owned by public authorities and institutions with their own attributions in the field of national security, in the field of cyber security, national defense and public order.DNSC specifies that the law has a direct impact only on certain categories of organizations, but the Directorate recommends that all users and decision-makers in Romania carefully analyse the security solutions they use, in the context of the hybrid conflict between Russia and Ukraine.