Protocol amending Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, published in the Official Gazette

       The National Center for Personal Data Protection (NCPDP), for information purposes, communicates about the ratification, by Law 36/20.03.2026 and the publication in the Official Gazette of the Republic of Moldova, of the Protocol amending the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

       The purpose of this Protocol is to modernize the international framework in the field of personal data protection, in order to ensure a high level of protection of the fundamental rights and freedoms of natural persons, especially the right to private life, in the context of technological developments and the globalization of data flows.

       The revised document, also known as „Convention 108+”, comes with a number of essential improvements, aimed at strengthening data protection mechanisms and responding to new challenges generated by the use of modern technologies.

       Among the main provisions of the Amending Protocol are:

• Strengthening the protection of personal data;
• Strengthening the rights of data subjects;
• Expanding the category of sensitive data, by including genetic, biometric and ethnic origin data;
• Introducing safeguards for decisions based solely on automated processing;
• Establishing clear obligations for controllers, including rules for international data transfers.

       The new regulations also place increased emphasis on controller’s accountability, processing transparency and the establishment of effective supervisory mechanisms, including by strengthening the role of independent control authorities and intensifying international cooperation.

       The ratification of this Protocol represents an important step for the alignment of the Republic of Moldova with international and European standards in the field of personal data protection. The implementation of its provisions will help to increase citizens’ confidence in the way their data are processed, as well as to facilitate the secure exchange of data at the international level. Law no. 36/20.03.2026 enters into force on August 23, 2026.

       Through this ratification, the Republic of Moldova reaffirms its commitment to ensure a high level of personal data protection and to strengthen international cooperation in this field.

       In this context, the NCPDP encourages public authorities, the private sector and other relevant actors to pay more attention to the new requirements and to take the necessary measures to ensure compliance with the updated standards in the field.