August 23, 2026 – a new benchmark for personal data protection in the Republic of Moldova

       23 August 2026 represents a benchmark date for personal data protection in the Republic of Moldova. As of this date, two important pieces of legislation enter into force – Law No. 195/2024 on personal data protection and Law No. 160/2026 on the protection of personal data processed for the purposes of preventing and combating crime.

       The entry into force of the two laws marks an important stage in the modernisation and strengthening of the national personal data protection framework, in line with European standards and the Republic of Moldova’s objectives of European Union integration.

       Law No. 195/2024 on personal data protection establishes a modern legal framework that strengthens the rights of data subjects and the responsibilities of those who process personal data. It places greater emphasis on the lawfulness, fairness and transparency of processing, as well as on accountability and data security.

       The importance of the new law is reflected, first and foremost, in the safeguards it provides to individuals with regard to the protection of their private life, dignity and fundamental rights, in a context where personal data are increasingly used in the activities of institutions and organisations, as well as in the digital environment.

       At the same time, Law No. 160/2026 on the protection of personal data processed for the purposes of preventing and combating crime establishes specific rules and safeguards for the processing of personal data by competent authorities for the purposes of preventing and combating crime. The legislation seeks to ensure a balance between the need to prevent and combat crime and the respect for individuals’ fundamental rights, including the right to personal data protection.

       Another important benchmark in this process is the ratification of the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data – Convention 108+. On 15 May 2026, the Republic of Moldova deposited its instrument of ratification, further strengthening its commitment to European and international standards in the field of personal data protection.

       “The new rules are, first and foremost, about people and their rights. A modern legal framework means more than rules and procedures. It means real safeguards for every individual, greater responsibility in the way their data are used and greater trust in the institutions that process it. The new provisions require efforts to adapt and ensure compliance, but their ultimate purpose is essential: to protect the private life, dignity and fundamental rights of every individual,” stated Victoria MUNTEAN, Director of the NCPDP.

       August 23, 2026 therefore marks the beginning of a new stage for personal data protection in the Republic of Moldova – a stage based on clearer rules, greater accountability and strengthened safeguards for data subjects.

       The NCPDP will continue to inform, provide guidance and support to authorities, organisations and citizens in understanding and applying the new legal framework, thereby contributing to the development of an institutional and social culture based on respect for the right to personal data protection.