Romania to Enforce Cybersecurity Audits on Photovoltaic Inverters Amid Data Privacy Concerns

Romania mandates cybersecurity audits for PV inverters, addressing data privacy concerns. With new framework proposals, the government aims to secure renewable infrastructure and support pumped storage and battery capacity expansion.

The Romanian Ministry of Energy has initiated a mandate for cybersecurity audits on all inverters in photovoltaic (PV) systems, from small home installations to large-scale solar power plants, amid growing concerns over data security. This comes as a measure to prevent unauthorized data sharing with foreign entities. The audits are part of a larger public debate on a newly proposed executive order, which seeks to amend the Law on Electricity and Natural Gas and the Law on the Establishment of the System for Promoting Energy from Renewable Sources.

Establishing a Robust Framework for Energy Security and Renewable Development

The proposed decree intends to provide a sustainable framework that supports the growth of energy storage and establishes a regime for strategic electricity production. A key focus of the executive order is on cybersecurity, mandating regular audits for inverters and all digital components of PV facilities. Newly built photovoltaic plants would undergo immediate cyber audits, while existing systems will be inspected periodically to assess potential risks.

“The energy transition is no longer a long-term goal but a national emergency,” Minister of Energy Sebastian Burduja emphasized, noting that the draft order aligns with Romania's commitment to a green and secure energy future. The framework will also pave the way for innovative projects like pumped storage hydropower, advancing the nation’s renewable energy capacity and resilience.

Enhancing Infrastructure and Addressing Digital Vulnerabilities

The Ministry of Energy noted that protecting critical infrastructure against digital vulnerabilities has become paramount, especially given the risks posed by imported equipment that may transfer data to hostile third parties. As Romania’s renewable energy capacity grows, ensuring digital security in PV systems is critical to maintaining national security.

Romania currently hosts over 3,700 MW of solar power capacity, with around 2,000 MW coming from PV systems owned by over 100,000 prosumers. Additionally, the government recently initiated talks with the Itochu-EDF consortium regarding the construction of the Tarnița-Lăpuștești pumped storage facility, highlighting its commitment to both energy transition and infrastructure security.

Investing in Battery Capacity for a Secure Energy Future

Alongside cybersecurity measures, Romania has also made strides in energy storage investment. In July, Minister Burduja announced government plans to sign contracts for an additional 1.5 GWh in battery storage capacity, positioning Romania as a growing player in renewable energy with a commitment to robust infrastructure and cyber resilience.