The Hidden Risks of Bringing Foreign Workers to Romania Under OUG 32/2026

Every company that decides to bring foreign nationals to Romania under OUG nr. 32/2026 makes a procedural choice early in the process: go through a licensed placement agency, or pursue direct authorisation and recruit independently. The legislation describes both routes. What it does not describe — at least not in a single readable place — is what happens when things go wrong.

The risks are not uniformly distributed. They sit in specific places in each route, they activate at specific moments, and several of them are structural rather than incidental. An organisation that understands the risk architecture before it starts the process will build its compliance framework differently from one that discovers these risks partway through.

The Risk That Sits Inside the Authorised Employer Route

Full control comes with full accountability

The authorised employer route is frequently described in terms of its advantages: direct control, no agency dependency, faster response times, predictable internal processes. Those advantages are real. But they sit on top of a liability structure that is both broader and less forgiving than most employers anticipate.

The law is unambiguous on this point: the authorised employer is fully and directly liable for the entire legality of the recruitment process. There is no mechanism for distributing that liability to an upstream supplier, a foreign recruitment partner, or a subcontractor. The employer holds it.

That has a specific practical consequence. If documentation is incomplete, if a worker arrives without a properly executed firm offer, if SSM training is not delivered in the worker's language, if the contract does not include all mandatory elements — the employer faces the sanction directly, calculated per worker, with no shared liability to dilute the exposure.

The financial guarantee is a capital trap for the unprepared

Most employers focus on the 1,000 EUR per worker guarantee as a one-time upfront cost. The more significant risk is the replenishment mechanism.

If the guarantee is executed — for return costs, for worker welfare costs, or for unpaid contraventional fines — the employer has 30 days to restore it to its full value. If they do not, the authorisation is suspended. If the underlying cause of the execution has not been resolved, suspension can escalate to withdrawal. If the authorisation was obtained through misrepresentation, it can be cancelled entirely — at which point the full guarantee is converted to state budget revenue, not applied against any actual liability.

For a company employing 30 foreign workers, the guarantee exposure is 30,000 EUR permanently committed. A single enforcement event — a group removal, a set of unpaid fines — could trigger execution, create a 30-day replenishment deadline, and simultaneously expose the employer to the administrative consequences of any underlying violation. These timelines and processes run in parallel, not sequentially.

Losing the authorisation has no quick fix

The administrative consequences for the authorised employer are structured around escalating restriction periods: 6 months for unpaid fines, 12 months for failing to meet authorisation conditions, 24 months for using workers for third-party employers, 36 months for excessive undocumented workers. Indefinite loss applies in cases of exploitation.

What these figures mean in practice is that a serious compliance failure does not produce a fine and a corrective action plan. It produces a multi-year exclusion from the direct recruitment route, during which the company must either recruit no foreign workers, or revert to the agency route — assuming it can find a qualified agency willing to work with a company whose authorisation was recently revoked.

The indefinite loss of authorisation, applicable to exploitation cases, has no statutory reinstatement path. It is a permanent exit from the route.

The internal capability requirement is frequently underestimated

Authorised employers require competence across immigration law, HR compliance, payroll, data protection, occupational health and safety, multilingual worker communication, and regulatory reporting to multiple authorities simultaneously — ANOFM, Inspecția Muncii, IGI, and ANSPDCP each have overlapping jurisdiction over different aspects of the process.

Companies that begin the authorised route without this capability in place do not simply struggle administratively. They generate contraventional exposure across every obligation they fail to meet, with each failure calculated per worker. A company with 20 foreign employees that lacks a clear notification protocol for contract terminations has not missed one deadline — it has potentially missed 20, each carrying a 1,500–3,000 lei fine.

The Risks That Sit Inside the Placement Agency Route

You do not control the most critical parts of the process

The placement agency route transfers a significant portion of the procedural burden to the agency. Pre-selection, documentation management, worker information, platform submission — these become the agency's responsibility. That is the route's primary advantage. It is also the source of its primary risk.

The employer's hiring timeline is entirely dependent on the agency's operational performance. A high refusal rate on applications — driven by weak documentation, poor candidate screening, or unfamiliarity with the specific occupation — does not result in a fine for the agency. It results in vacant positions for the employer. The employer absorbs the operational consequence of errors that are the agency's legal responsibility.

This asymmetry is particularly pronounced in the candidate sourcing stage. Most international placement processes involve local intermediaries in the workers' home countries — agents, fixers, or informal networks that the employer has no visibility over and no contractual relationship with. The worker's first point of information about their salary, their housing, their working conditions, and their rights comes from these actors. If that information is inaccurate, the employer encounters the consequences when the worker arrives: misaligned expectations, grievances about conditions described differently from what was promised, and turnover driven by a gap between what the worker was told and what is true.

Agency suspension stops everything — and the employer has no exit

If a licensed placement agency is suspended — the standard duration is 45 days — it cannot submit new permit applications and applications already in progress are suspended by operation of law. For an employer mid-cycle with a cohort of workers in the pipeline, this means a complete halt with no legal mechanism for self-rescue.

The only path forward is a new agency. That requires identifying a licensed alternative with capacity, re-establishing the contractual and documentary framework, and ensuring the new agency can pick up applications that may have been partially processed by a different operator. None of this happens quickly. In sectors where labour shortfalls are operationally critical, a 45-day suspension of the agency can cause cascading delays well beyond the suspension period itself.

If the agency's authorisation is withdrawn — because it failed to remedy the issues that triggered suspension — the disruption is more severe and longer-lasting. If the authorisation is cancelled on grounds of fraudulent procurement, the financial guarantee held by the agency becomes state revenue. Workers in the pipeline have no active intermediary, and the employer has no immediate recourse within the same procedural framework.

The responsibility that employers cannot transfer

Two liability categories remain firmly with the employer regardless of the agency relationship.

Employer-side obligations under the CIM remain the employer's. The individual employment contract is between the employer and the worker. Obligations around salary payment, SSM, protective equipment, Romanian language courses, document retention, and complaint procedures sit with the employer. The agency managing the process does not absorb these obligations. An employer that assumes otherwise will discover it during an Inspecția Muncii visit, not before.

Reputational exposure follows the employer, not the agency. If workers arrive with distorted information about their conditions — information that came from the agency or from intermediaries the agency used in the country of origin — the public-facing consequences attach to the employer's brand. Reviews, social media, community-level communication among migrant worker networks: these reflect the employer's name, not the agency's. A sanctioned or poorly performing agency creates reputational risk that the employer cannot contain through contractual indemnities.

The Risks That Exist on Both Routes

The multiplier effect of per-worker fines

The single most important feature of the 2026 sanctions framework, from a financial risk modelling perspective, is that the majority of violations are sanctioned per worker affected. This is not a technicality. It is the mechanism that transforms a procedural lapse into a catastrophic fine.

An employer that has not arranged Romanian language courses for its foreign workforce has not committed one violation. It has committed as many violations as it has foreign workers, each carrying a fine of 5,000–10,000 lei. For a workforce of 40 foreign nationals, the exposure from that single omission is 200,000–400,000 lei.

Both the authorised employer and the employer using an agency can face per-worker fines — the former directly for its own operational failures, the latter for the employment obligations that remain with it regardless of the agency relationship.

Multi-authority enforcement is the expected scenario

Four authorities share enforcement competence under OUG 32/2026: Inspecția Muncii, IGI, ANOFM, and ANSPDCP. Their jurisdictions overlap substantially. An inspection event that begins with one authority will frequently generate referrals or parallel processes with others.

An employer found by Inspecția Muncii to have failed on SSM documentation, CIM bilingualism, and document retention may simultaneously face IGI concerns about worker residence notifications and ANOFM concerns about the platform registration and guarantee position. These are not sequential processes that resolve before the next one starts. They run in parallel, each with its own timeline and each capable of generating independent financial and administrative consequences.

The three levels of the sanctions regime — contraventional fines, administrative consequences, and extended financial recovery mechanisms — operate independently of each other. Resolving the fine does not resolve the administrative consequence. Resolving the administrative consequence does not close the financial recovery mechanism. Organisations that treat compliance failures as isolated events, to be resolved one at a time, will find themselves managing overlapping enforcement timelines simultaneously.

What Reduces Risk on Either Route

The common factor across both routes is preparation that precedes the first hire, not compliance that responds to the first problem.

For the authorised employer, this means mapping internal capability honestly against what the route actually requires, building notification protocols and documentation management systems before the first worker arrives, and modelling the financial guarantee commitment across the projected workforce.

For the employer using a placement agency, it means selecting the agency on the basis of its compliance record, authorisation status, guarantee position, documentation quality, and its processes in source countries — not on the basis of speed or price. It also means understanding, precisely, which obligations remain with the employer despite the agency relationship, and building internal processes to meet those obligations independently of what the agency does or does not do.

In both cases, the risk of the first compliance failure is significantly lower for organisations that understood the framework before it applied to them.

Nestlers Group: Compliance Architecture for International Recruitment in Romania

Nestlers Group works with employers and placement agencies navigating OUG 32/2026. We help organisations build the compliance infrastructure that reduces risk before an inspection, not after one — from route selection and authorisation assessment through to ongoing notification protocols, documentation management, and enforcement response.

Our team has direct experience with both procedural routes, both the WorkInRomania platform, and the enforcement practices of the authorities that share jurisdiction under this framework.