On June 29, 2026, the National Center for Personal Data Protection (NCPDP) participated in a workshop titled “Digital Safety of Young People in the Context of European Standards and the Process of Accession to the European Union,” organized by the National Youth Council of Moldova (NYCM).

       The event brought together representatives of civil society, experts and national public authorities, with the aim of facilitating dialogue on the analysis of the legislative, institutional and policy framework in the field of digital safety for young people and women, in relation to relevant European standards, including the General Data Protection Regulation (GDPR), the Digital Services Act (DSA), and the Artificial Intelligence Act (AI Act).

       The discussions addressed topics related to the protection of minors and women in the digital environment, the harmonization of national legislation with the EU acquis, the strengthening of institutional protection mechanisms, as well as the identification of solutions and recommendations for the development of public policies compatible with European Union standards.

       The NCPDP representative participated as a speaker in the panel discussion titled “Regulatory and Supervisory Institutions: Institutional Capacity and Mechanisms for Strengthening Competencies,” intended for authorities with regulatory and supervisory responsibilities.

       During the panel, he delivered a presentation on the role of the supervisory authority in ensuring compliance with the regulatory framework for the personal data protection in the digital environment, highlighting the importance of consistently applying the principles of legality, transparency and security in the data processing process, and emphasizing that these are fundamental elements for maintaining trust in the digital ecosystem and for protecting the rights of data subjects.

       At the same time, the need to strengthen the institutional capacities of supervisory authorities was emphasized, including through the development of monitoring tools, increasing the efficiency of control mechanisms and intensifying inter-institutional cooperation. In the context of the rapid development of digital services and the growing volume of processed data, the essential role of a proactive approach in preventing risks and ensuring compliance with applicable legal provisions was underscored.

       By participating in this workshop, the NCPDP reaffirms its commitment to promoting respect for the right to personal data protection and to developing public policies aligned with European Union standards in the digital sphere.

       On June 17, 2026, the National Center for Personal Data Protection (NCPDP) participated in an inter-institutional working meeting organized by the Electoral Council of Telenești District Electoral Constituency No. 34, attended by representatives of local public authorities and the district’s deconcentrated and decentralized services.

       The event took place as part of the post-election information, cooperation and analysis activities carried out by the Central Election Commission in collaboration with the public authorities involved in organizing and conducting electoral processes. The purpose of the meeting was to identify any difficulties encountered during the electoral processes, analyze existing practices and formulate proposals aimed at improving the regulatory framework and electoral procedures.

       One of the central topics on the agenda concerned the compilation and updating of voter rolls in compliance with personal data protection requirements, as well as issues related to the processing of voter data by registrars of the State Voter Registry and election officials in the performance of their duties.

       During the session, the NCPDP representative presented the main provisions of national legislation on the protection of personal data applicable to electoral processes. At the same time, practical aspects were addressed regarding ensuring the legality of data processing, compliance with the principles of confidentiality and security, as well as the measures necessary to prevent unauthorized access to the information contained in the voter rolls.

       Participants had the opportunity to ask questions and discuss practical situations encountered in their work, with emphasis placed on the importance of uniformly applying personal data protection rules at all stages of the electoral process. Furthermore, best practices were promoted to help strengthen citizens’ trust in how the competent authorities manage their personal data.

       The event was attended by 55 representatives of local public authorities, decentralized and deconcentrated services, as well as other stakeholders involved in electoral processes at the local level.

       By participating in such activities, the NCPDP reaffirms its commitment to supporting public authorities in the proper application of personal data protection legislation and to contributing to the strengthening of an institutional culture based on respect for individuals’ fundamental rights and freedoms.

       On July 3, 2026, the National Center for Personal Data Protection (NCPDP) conducted a training course for employees of the Police Inspectorate in Strășeni, as part of the implementation of the 2026 Training Plan for the subdivisions of the General Police Inspectorate, approved by the head of the NCPDP and the General Police Inspectorate on January 28 of this year.

       This activity is part of the joint efforts undertaken by the two institutions to strengthen the professional capacities of police employees in the field of personal data protection and to promote the correct and uniform application of legislation in their day-to-day activities.

       The objective of the training was to develop participants’ practical skills regarding the lawful processing of personal data in the performance of their official duties, as well as to foster an institutional culture based on accountability, integrity and respect for individuals’ fundamental rights.

       The session addressed key issues regarding:

• the basic principles of personal data processing;
• the legal grounds for data processing in the activities of law enforcement agencies;
• the rights of data subjects and the obligations of controllers;
• the technical and organizational measures necessary to ensure data security;
• handling requests for the provision of personal data;
• analyzing practical cases and identifying solutions that comply with legal provisions.

       At the same time, participants discussed specific situations encountered in their professional activities, highlighting the risks associated with improper data processing and ways to prevent them. The interactive dialogue helped clarify practical aspects regarding the application of the principles of lawfulness, necessity and proportionality in the processing of personal data.

       Among the main conclusions of the training are the need to integrate the principle of data protection into the day-to-day activities of PI Strășeni employees, the implementation of appropriate security measures to protect the information handled and the reinforcement of each employee’s responsibility to respect the rights of data subjects.

       The NCPDP will continue to implement the training program for the subdivisions of the General Police Inspectorate, contributing to the development of institutional practices that comply with national and European standards in the field of personal data protection.

       By strengthening inter-institutional cooperation and promoting ongoing training, the NCPDP aims to increase compliance with relevant legislation and strengthen citizens’ trust in how public authorities process and protect their personal data.

       During the event, 52 representatives of the Strășeni Police Inspectorate were trained.

       On June 18, 2026, the National Center for Personal Data Protection (NCPDP) organized a training course for representatives of the Western Regional Directorate of the General Inspectorate of Border Police (GIBP) The event was held in accordance with the 2026 Training Plan for the subdivisions of the General Inspectorate of Border Police, approved and signed by the leadership of the NCPDP and the GIBP on January 28, 2026.

       The purpose of the training was to strengthen participants’ awareness of the proper application of the regulatory framework governing the protection of personal data, taking into account the specific nature of the GIBP’s activities, which involve the processing of a significant volume of personal data in the exercise of its duties to control and monitor the state border. At the same time, the training aimed to promote an institutional culture based on respect for the principles of legality, confidentiality, integrity and security of personal data.

       The session addressed relevant topics, including the fundamental principles of personal data processing, the conditions for lawful processing, the rights of data subjects, the obligations of controllers, technical and organizational security measures, as well as procedures for reporting and managing security incidents. In addition, aspects related to data processing in the context of state border controls, the use of information systems, the exchange of information between competent authorities, and compliance with the principles of necessity and proportionality in the data processing process were analyzed.

       Particular emphasis was placed on identifying and preventing risks associated with unauthorized access to information containing personal data, as well as its unauthorized disclosure and misuse; practical examples and recommendations were presented to help strengthen compliance and accountability in the professional activities of GIBP employees.

       The session also included interactive discussions and the examination of practical situations encountered in the participants’ day-to-day work, providing an opportunity to clarify practical issues and identify solutions that comply with the requirements of personal data protection legislation.

       The NCPDP appreciates the interest and involvement of the representatives of the Western Regional Directorate of the General Inspectorate of Border Police and reaffirms its commitment to supporting public institutions in the process of implementing and complying with national and European standards in the field of personal data protection.

       During the event, 140 representatives of the Western Regional Directorate of the General Inspectorate of Border Police were trained.

       On June 16, 2026, the National Center for Personal Data Protection (NCPDP) – in collaboration with the General Inspectorate of Border Police (GIBP) – launched the information and awareness campaign “Protect Your Personal Data: Be Vigilant Against Telephone Fraud,” held at the Leușeni Border Crossing Point. The campaign aims to raise public awareness of the risks associated with telephone fraud and the importance of personal data protection.

       The information and awareness-raising initiative was carried out with the active involvement of the Personal Data Protection Department within the General Inspectorate of the Border Police (GIBP). As part of the campaign, travelers were provided with informational materials and practical recommendations on how to identify fraud attempts and prevent the unauthorized disclosure of personal data.

       Participants were informed that, recently, there has been an increase in cases where unknown individuals contact citizens via phone calls and, under various pretexts, request that they disclose personal data. In most cases, scammers pose as representatives of banks, law enforcement agencies, public authorities, telecommunications companies, or other well-known entities, attempting to obtain information such as first and last names, national ID numbers, home addresses, bank details or other confidential information.

       During the campaign, citizens were warned that providing such information to unauthorized persons can lead to the fraudulent use of personal data, unauthorized access to bank accounts, compromised financial security and other consequences that may affect the rights and legitimate interests of the data subject.

       NCPDP representatives emphasized that any request for the disclosure of personal data must be treated with the utmost caution. It is essential for data subjects to verify the identity of the caller and the authenticity of the request before providing any information that allows for their direct or indirect identification. At the same time, citizens were urged not to provide personal data over the phone to unknown individuals, to hang up on suspicious calls and to verify information exclusively through the official channels of the institutions in question.

       Furthermore, participants were reminded that personal data obtained by misleading individuals may subsequently be used for illegal purposes. In this context, the NCPDP reiterated that the use of personal data without a legal basis constitutes a violation of personal data protection legislation and may result in administrative or criminal liability, as applicable.

       The campaign took place in an interactive setting, offering citizens the opportunity to ask questions and receive practical recommendations on the measures needed to protect personal data and prevent the risks associated with telephone fraud.

       As part of their inter-institutional collaboration, the NCPDP and the GIBP will continue to conduct activities to inform and raise public awareness about personal data protection, promoting responsible behavior and effective measures to prevent the fraudulent use of personal information.

       In this regard, the NCPDP, as the national supervisory authority for the processing of personal data, emphasizes the responsibility of every citizen to ensure the protection of personal data, as the security and confidentiality of such data must be a priority.

       On June 29, 2026, the National Center for Personal Data Protection (NCPDP) organized a training session for representatives of the Association of Auditors and Audit Firms “AFAM,” at their request.

       The session aimed to strengthen participants’ knowledge and develop their practical skills in the field of personal data protection, with an emphasis on the correct and uniform application of the provisions of Law No. 133/2011 on personal data protection, as well as relevant standards and best practices in this area.

       The session addressed in detail the fundamental principles of personal data processing, including lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; and ensuring data integrity and confidentiality. The session also highlighted the essential role of adhering to these principles in audit work, where access to significant volumes of information entails a high level of responsibility.

       Another important topic concerned establishing the legal grounds for personal data processing, with an emphasis on the need to correctly identify these grounds based on the specific context of audit and verification activities. The obligations of controllers and processors were also discussed, including those related to documenting processing activities, maintaining internal records and respecting the rights of data subjects.

       Participants were also informed about the importance of implementing appropriate technical and organizational measures to ensure data security, prevent unauthorized access, loss or improper disclosure of information, as well as the need for periodic risk assessments related to processing activities.

       At the same time, practical aspects of audit work were presented, including common situations regarding auditors’ access to personal data, the legal limits of such access and the need to comply with the principles of proportionality and data minimization during audit and control engagements.

       The session also included an active exchange of views and questions from participants, who addressed specific situations from their professional practice, thereby helping to clarify certain practical aspects and foster a better understanding of the regulatory framework.

       The NCPDP welcomes the interest shown by representatives of the “AFAM” Association in deepening their knowledge in the field of data protection and reiterates the importance of ongoing training for professionals who, in the course of their duties, process personal data, with a view to ensuring a high level of compliance and the effective protection of the fundamental rights and freedoms of data subjects.

       The event, held online, was attended by 55 representatives of the “AFAM” Association of Auditors and Audit Firms.

On June 24–25, 2026, representatives of the National Center for Personal Data Protection (NCPDP) participated in the 77th meeting of the International Working Group on Data Protection in Technology (IWGDPT), known as the “Berlin Group.” The event took place in Warsaw, Poland, at the invitation of Poland’s Office for Personal Data Protection (UODO).

The event brought together international experts in the field of data protection, with the primary objective of strengthening international cooperation and analyzing the impact of new technologies on the right to privacy and the protection of personal data.

Over the course of the two-day meeting, participants addressed a number of current topics, including:

• the use of artificial intelligence and how organizations can adapt their operations to better protect personal data;
• extended reality (XR), new ways for users to manage their data privacy preferences and the use of cloud services;
• the evolution of new communication technologies and their impact on the personal data protection;
• the use of artificially generated data and its role in the development of new digital services;
• the protection and use of data belonging to deceased individuals, from both a legal and ethical perspective;
• the exchange of experiences and best practices among data protection authorities from different countries.

The meeting’s agenda also included presentations by international experts, “tour de table” sessions on recent developments at the national level, as well as thematic discussions focused on future directions for development in the field of emerging technologies and data protection.

The event served as an important forum for exchanging experiences and strengthening cooperation among data protection authorities worldwide, helping to identify common approaches to the challenges posed by rapid technological developments.

       On June 16, 2026, the National Center for Personal Data Protection (NCPDP) organized a training session for representatives of the Parliament of the Republic of Moldova, with the aim of strengthening their knowledge regarding the application of the regulatory framework in the field of personal data protection and familiarizing participants with the new regulations set forth in Law No. 195/2024 on the personal data protection.

       The training session aimed to deepen participants’ understanding of the new obligations and responsibilities incumbent upon public authorities in the processing of personal data, as well as to facilitate the uniform and effective application of legal provisions.

       During the session, key issues were addressed regarding the principles of personal data processing, the rights of data subjects, the legal grounds for processing, the responsibilities of controllers and processors, as well as the technical and organizational measures necessary to ensure data security and confidentiality.

       Particular emphasis was placed on the main changes introduced by Law No. 195/2024 on personal data protection, which aligns the national regulatory framework with European standards in this area. In this context, participants were briefed on the application of the principle of accountability, record-keeping of processing activities, data protection impact assessments, notification of personal data breaches, the strengthening of data subjects’ rights, as well as the new supervisory powers and enforcement mechanisms provided for by the legislation.

       In addition, the practical challenges faced by public authorities in their day-to-day processing of personal data were analyzed, with relevant examples and recommendations presented regarding the implementation of the necessary compliance measures in light of the new legal provisions.

       The event took place in an interactive format, offering participants the opportunity to ask questions and discuss practical issues specific to their work. The exchange of views and experiences contributed to a better understanding of institutional obligations and the measures necessary to ensure compliance with the right to personal data protection.

       By organizing this training session, the NCPDP reaffirms its commitment to supporting public institutions in the process of implementing the new legislative provisions and strengthening institutional capacities in the field of personal data protection.

       The event was attended by 90 officials from the Parliamentary Secretariat, including staff from the offices of public officials.

       The NCPDP will continue to conduct training and outreach activities for public institutions, with the aim of promoting a strong culture of personal data protection and ensuring the effective implementation of the provisions of Law No. 195/2024 on personal data protection.

       The National Center for Personal Data Protection of the Republic of Moldova (NCPDP) and the Agency for Cyber Security (ACS) have signed an inter-institutional cooperation agreement aimed at strengthening collaboration in the field of personal data protection and cyber security.

       The signing of the Agreement represents an important step in developing an effective mechanism for institutional cooperation, based on the exchange of information, technical expertise, best practices and the coordination of activities carried out within the areas of competence of the two institutions.

       The purpose of the Agreement is to strengthen inter-institutional relations and ensure effective and coordinated cooperation with a view to enhancing the level of personal data protection, preventing and effectively managing security incidents and strengthening national cyber resilience.

       Under the Agreement, the parties will cooperate in several areas of common interest, including: organizing and jointly participating in conferences, seminars, roundtables, training sessions and other relevant events;  the development and implementation of joint professional training programs for the staff of both institutions; the conduct of information and awareness campaigns on the personal data protection and cybersecurity; the promotion of a culture of data protection and cybersecurity among public authorities, the business community and citizens; joint participation in relevant international projects, initiatives, and programs; cooperation in managing security incidents and, where appropriate, conducting joint investigation and control activities, within the limits of legal authority; facilitating the exchange of information of mutual interest for the prevention and management of risks associated with cybersecurity and the personal data protection.

       At the same time, the Agreement provides for strict compliance with confidentiality requirements and the legal framework applicable to restricted-access information, including personal data processed within the framework of institutional cooperation.

       The signing of this Agreement reaffirms the joint commitment of the NCPDP and the ACS to strengthening institutional capacities and developing effective cooperation mechanisms to protect individuals’ fundamental rights and freedoms in the context of digital transformation and the challenges posed by cybersecurity.

       On May 11, 2026, the National Center for Personal Data Protection (NCPDP) organized the TAIEX workshop “Mechanisms for Ensuring the Lawfulness of Personal Data Processing.”

       The event brought together European experts and representatives of the NCPDP, with the aim of strengthening institutional capacities in the area of exercising supervisory and compliance functions regarding personal data protection legislation, in the context of the Republic of Moldova’s alignment with European Union standards.

       The workshop took place in a context marked by accelerated digital transformation and an increase in the volume of processed data, which require the strengthening of mechanisms to protect the fundamental right to privacy. At the same time, it took place in view of the entry into force of Law No. 195/2024 on personal data protection, which transposes the European acquis in this field.

       The main purpose of the event was to deepen understanding of how data protection authorities in European Union member states exercise their powers to oversee the lawfulness of data processing, as well as to identify effective solutions and best practices applicable to the work of the NCPDP.

       The event agenda included thematic sessions dedicated to:

• the regulatory framework and the role of supervisory authorities in the field of data protection;
• the conformity assessment process and methodologies for verifying compliance with legislation;
• control and audit mechanisms, including practices for monitoring and investigating violations;
• the use of modern technologies to ensure data security, such as encryption and pseudonymization;
• the analysis of case studies and relevant practical examples;
• criteria for establishing sanctions and assessing the impact of corrective measures applied.

       Mr. Bartłomiej Kohnke, a representative of the Polish Ministry of Justice, and Mr. Hristo Alaminov, a representative of the Bulgarian Commission for Personal Data Protection, participated as international experts. They presented the experience and practices of the institutions they represent, offering participants practical insights and useful tools for supervisory activities.

       The discussions highlighted the importance of developing effective oversight mechanisms based on risk assessment, transparency and the proportionate application of corrective measures, as well as the need to strengthen international cooperation in the field of data protection.

       Participants had the opportunity to analyze concrete procedures for conducting inspections, including the development of inspection methodologies, the conduct of internal and external audits as well as the application of sanctions in accordance with the severity of violations found..

       The TAIEX workshop contributed to the exchange of experiences and the adoption of European best practices, supporting the NCPDP in its institutional development and alignment with European standards in the field of personal data protection.

       The NCPDP reaffirms its commitment to continuing cooperation with European and international partners to strengthen an effective oversight system and ensure respect for individuals’ fundamental rights in the context of personal data processing.

       The workshop was organized and funded by the European Commission’s Technical Assistance and Information Exchange Instrument (TAIEX).