What actually triggers a search

For most people, the word "search" brings to mind a cinematic scene: armed officers breaking down doors and overturning furniture. In reality, almost every search in Romania has a concrete procedural origin, not an arbitrary decision made by a police officer on your doorstep.

The most common scenario is a criminal case against the company itself or its management: suspicion of tax evasion, fraud, money laundering. The second scenario: the company is not a suspect, but the search is conducted because a business partner with whom an ordinary contract was signed has come under investigation, and the partner's documents and equipment may become evidence in someone else's case. The third scenario: a tax or customs matter, when an inspection by ANAF escalates into criminal proceedings. And the most important scenario for understanding: a person or company appears in a search as a witness in someone else's case, without the status of suspect, simply because correspondence or accounting records might contain traces of events of interest to the investigation. This status does not exempt you from a search, but it changes what you should demand on site.

Lawyer's advice. If you learn about a search or summons in someone else's case, do not try to clarify details on your own via phone or informal conversation with an investigator. Your status—suspect, witness, or third party—determines the scope of your rights, and this should be clarified through a lawyer.

Who has the right to conduct searches and seizures in Romania

Searches and equipment seizures in Romania are not conducted by a single universal authority. Depending on the nature of the case, different agencies may appear at your door, each within their own competence.

Poliția Română, procurorul, DIICOT and DNA

Poliția Română physically carries out the search on instructions from and under the control of the prosecutor. Procurorul directs the investigation, petitions the court for a warrant, and is formally responsible for the legality of actions. DIICOT investigates organized crime, cybercrime, and serious economic cases; DNA handles corruption cases involving public officials or public funds. These searches are typically larger-scale and accompanied by simultaneous actions at multiple addresses.

ANAF and Direcția Generală Antifraudă Fiscală

ANAF, through its Direcția Generală Antifraudă Fiscală division, gets involved when the case has a tax component—hidden income, fictitious transactions, TVA evasion—and often works alongside police investigators or DIICOT. We wrote about ordinary tax inspections without criminal aspects in our article on business inspections in Romania; a search is a far more severe tool. Regardless of who arrives, it is important to immediately ask for official identification and record the names and titles of those present—this is a lawful action that will be needed if you need to challenge how the search was conducted.

Search warrant: what to check at the door

A search in Romania is not a decision that a police officer makes at their own discretion. It is always based on a document issued by a court, and this document determines the limits of what is lawful.

Mandatul de percheziție

Mandatul de percheziție is issued by a judecătorul de drepturi și libertăți—a judge who authorizes investigative actions that affect human rights during the investigation stage. The warrant must contain the agency conducting the search, the exact address, the legal basis and the case, and the validity period. At the door, ask to see the document and check: does the address match, has the period not expired, does the document cover the specific object—apartment, office, car—actually being searched.

Percheziția informatică—separate authorization for equipment

The mere fact of a percheziția domiciliară warrant does not always automatically give the right to copy and analyze the contents of phones, laptops, and servers. Percheziția informatică often requires separate permission or at least a specific mention in the warrant that the search extends to electronic devices. If the document is silent on equipment and access is demanded, this is exactly the moment when having a lawyer present on site matters. Premises and items not mentioned in the warrant and clearly unrelated to the case formally fall outside what can be seized without additional grounds—every questionable seizure should be recorded as an objection in the proces-verbal.

Lawyer's advice. Ask for the opportunity to photograph the first pages of the warrant with the case number, date, and judge's signature. Your lawyer will check this document in the first hours after the search, looking for grounds to challenge the procedure if it was violated.

How to behave during a search

Behavior in the first minutes of a search often affects the case more than any documents prepared in advance.

None of these actions are obstruction of an investigation—on the contrary, these are standard lawful practices that protect against investigator mistakes and prevent someone from being blamed for their own missteps.

A search is not just business

Most articles about searches are written as if they concern only companies and accounting. This distorts the picture: searches and equipment seizures in Romania equally affect a private apartment, a family car, a phone at a border crossing, and even a witness in someone else's case.

Apartment, car, phone at a border

A search of premises is subject to the same warrant rules as an office search—but it feels more invasive because it affects personal space and children's belongings. The right to a lawyer, the right to silence until consulting with one, the right to file objections in the protocol—these apply equally whether it is an office or a bedroom being searched. A car may be subject to a search within the same warrant. A separate situation is a demand to hand over or unlock a phone when crossing a border: rights here depend on specific circumstances, so a quick consultation with a lawyer is more important than attempting to assess the situation on your own.

A relative's device and witness status in someone else's case

A more complex case is the seizure of a device belonging to a family member not involved in the case: a teenager, spouse, or partner. Formally, their equipment may fall under the warrant if it is located at the search address, and it is the lawyer present on site who determines whether there is legal grounds for this. A person may also be searched as a witness in someone else's case—without their own suspect status, simply because of their circle of acquaintances or correspondence. Ukrainians building permanent lives in Romania and obtaining legalization and residence permits most often fear exactly these indirect situations—not their own guilt, but that someone else's case might touch their lives through their social circle.

Lawyer's advice. If a search is conducted at your apartment because of a relative's case, this is not a reason to silently accept all demands. Call a lawyer just as you would if it were your own case.

Phones, laptops and cloud: lawful protection in advance

The best preparation for a possible search has nothing to do with attempts to hide or destroy something at the moment of the procedure—it is about ordinary, lawful data hygiene that protects confidential information while the procedure determines what is subject to inspection.

Encryption, access controls, backups

Full disk and phone memory encryption is basic industry practice that protects data from device theft and unauthorized access; two-factor authentication on email and cloud is equally standard. This does not prevent lawful inspection of a seized device—it only prevents access by unauthorized third parties outside the established procedure. It is also important to separate work accounts from personal photos and correspondence, keep only work-necessary items on work devices, and maintain controlled backups of critical data outside main devices—so business continues to operate even if a server is temporarily seized.

Protection from spyware and public digital footprint

Regular scanning of devices for spyware and stalkerware, system updates, and restrictions on app installation from untrusted sources protect privacy long before the search question arises. Similarly, it is worth reducing the public digital footprint of business owners—addresses, phone numbers, personal details in public databases. The main principle: all these measures protect data before the moment when the procedure determines what is subject to inspection, not an attempt to influence that moment. Any destruction, concealment, or alteration of data after a search begins or is anticipated is a separate category of risk with nothing to do with the lawful protection described above.

Lawyer's advice. An audit of a company's digital hygiene should be a routine part of business management, not a reaction to a specific threat—then, if a search does happen, it costs far less time and stress.

What happens to seized equipment

After a search is completed, the fate of seized items is regulated by law just as strictly as the procedure itself.

Description, data copies and storage period

Ridicarea de obiecte și înscrisuri—the seizure of items related to the case; each device is entered in the proces-verbal with a description of model, serial number, and condition. A company or person has the right to receive a copy of the protocol immediately or within a reasonable time. If a device is needed for ongoing work, you can petition for a copy of necessary data instead of being completely denied access. The period during which seized items may remain with the investigation is not unlimited—the law sets limits, and detention beyond what the case justifies may be grounds for a petition for return.

Plângere to judecătorul de cameră preliminară

If seizure was carried out in violation of procedure or went beyond the warrant, the law provides for a plângere—a complaint reviewed by a judecătorul de cameră preliminară, the judge responsible for checking the legality of investigation actions. It can result in evidence being ruled inadmissible and property being returned. Filing a complaint requires precise knowledge of deadlines, so this is a stage where acting alone without a lawyer risks losing your chance through a procedural error.

Lawyer's advice. Immediately after a search, document in writing the time of arrival, the composition of the team, and what exactly was seized. Memory fades within days, and these details often determine whether you can prove procedural violations.

How Dorosh & Partners prepares for a search and supports after

A search is one of the few procedural actions where preparing "after the fact" is almost impossible: the first minutes determine how well you can protect your rights going forward. So the most valuable part of a lawyer's work happens long before the day investigators appear at your door.

Readiness audit and presence on site

We conduct a readiness audit of the company—whether there is a clear protocol of actions: who to call first, who speaks with investigators on behalf of the company. For teams with real risk, we conduct brief internal training for staff. When a search does happen, the value of a lawyer and advocate pair becomes clear: the client tells the lawyer the situation in plain language, often over the phone during the search; the lawyer translates it into legal language for the advocate and directs them to where help is genuinely needed. The advocate arrives on site, checks the warrant, monitors the procedure, and ensures that the client's objections make it into the protocol.

After the search: equipment and business

After the search, we help conduct lawful digital security improvements—encryption, access separation, managed backups outside main devices—prepare petitions for copies of work data and, if needed, a plângere against unlawful seizure, as well as representation in further proceedings if the case moves to trial. We explain in more detail why a lawyer and advocate pair gives better results specifically in criminal and court cases in our article on court and criminal cases in Romania.

What the support package includes

A general overview of legal support for business is available on the business in Romania page. We never promise a specific case outcome—only that at each stage, from the first call during a search to a possible trial, there is professional protection, not blind actions.

Lawyer's advice. The best time to reach out is before anyone knocks on the door, not after. A short consultation where we check your company's readiness and agree on who to call costs incomparably less time and stress than the first confused hours of an actual search. You can book through the consultation form.

Frequently asked questions

Can you refuse investigators access until a lawyer arrives?

No, a search based on a valid warrant cannot be stopped. The law provides for the right to a lawyer's presence, and investigators typically allow reasonable time for their arrival or contact. The correct behavior is not to obstruct access, but to immediately demand the ability to contact your defender.

Does the investigation have the right to copy all phone contents without separate permission?

Not always automatically. Percheziția informatică often requires separate mention in the warrant or separate permission specifically for examining electronic devices. If the warrant does not mention equipment and access is demanded, this should be discussed with your lawyer immediately.

What should I do if a search is conducted at my apartment because of a relative's case?

The right to legal assistance, the right to a lawyer's presence, and the right to file objections in the protocol apply regardless of whether a person is a suspect or merely a resident of the premises. It is important to contact a lawyer immediately, even if you are not personally suspected of anything.

Can seized equipment be returned before the investigation ends?

Yes, under certain conditions—through a petition for return of property not needed for examination, or obtaining copies of work data instead of retaining the original. Success depends on the circumstances of the case, so the chances should be evaluated with a lawyer immediately after the search.

Does disk encryption protect against a lawful search?

Encryption does not cancel lawful procedure and does not prevent the investigation from obtaining access in the manner established by law. It protects data from unauthorized access by third parties and is standard corporate practice with nothing to do with obstructing an investigation.

A search rarely happens completely suddenly in the legal sense—even the fastest action is based on a warrant prepared beforehand and follows a strict procedure from the first minute to the return or challenge of seized items. The difference between those who go through this procedure calmly and those for whom it becomes a disaster is often determined by one factor—whether there is a lawyer nearby, ready to take the first call and direct an advocate to where help is genuinely needed.

Матеріал має інформаційний характер і не замінює юридичну консультацію.