Romania’s Senate is discussing a draft proposal to the 2012 Energy Law that would introduce stricter cybersecurity requirements for renewable power generators with a capacity of up to 1 MW.
The measure would mandate the Romanian DNSC to define the technical standards that PV system owners must follow.
The proposal also stipulates that all PV and cogeneration systems up to 1 MW must be granted grid access and priority dispatching under the oversight of the DNSC.
The draft says the new measures are designed to prevent sensitive information from being stolen from power generation assets by actors within the supply chain or by “malicious” states, while also ensuring grid stability and energy supply security.
It also cites the European Union’s Net-Zero Industry Act (NZIA), which aims to produce at least 40% of Europe’s annual deployment needs for key clean technologies, including PV modules, batteries, and heat pumps, as part of the rationale for tightening cybersecurity rules.
“Renewable energy installations face a wide range of potential supply chain cybersecurity risks,” the draft proposal said. “This issue has also been debated at the European Union level, resulting in both its recommendations addressed to various stakeholders and, most recently, the Net Zero Industry Act, which provides that a certain part of tenders for certain renewable energy technologies must include pre-qualification criteria on responsible business conduct, cybersecurity and data security.”
Earlier this year, SolarPower Europe published a report on cybersecurity concerns surrounding solar installations in the European Union.
In September, Czechia's National Cyber and Information Security Agency (Núkib) said Chinese inverters in small solar power plants represent a potential security threat to the nation.
In July, the Dutch government said it is remaining vigilant to potential cybersecurity threats from solar inverters, while Lithuania has already banned remote Chinese access to management systems of solar, wind and storage facilities.
This content is protected by copyright and may not be reused. If you want to cooperate with us and would like to reuse some of our content, please contact: editors@pv-magazine.com.

By submitting this form you agree to pv magazine using your data for the purposes of publishing your comment.
Your personal data will only be disclosed or otherwise transmitted to third parties for the purposes of spam filtering or if this is necessary for technical maintenance of the website. Any other transfer to third parties will not take place unless this is justified on the basis of applicable data protection regulations or if pv magazine is legally obliged to do so.
You may revoke this consent at any time with effect for the future, in which case your personal data will be deleted immediately. Otherwise, your data will be deleted if pv magazine has processed your request or the purpose of data storage is fulfilled.
Further information on data privacy can be found in our Data Protection Policy.