On 18 August 2026, the National Center for Personal Data Protection (NCPDP) organized a training course for employees of Chișinău-Gaz LLC, focusing on the application of the provisions of Law No. 195/2024 on personal data protection.

       The training aimed to strengthen employees’ knowledge and skills regarding the new legal requirements in the field of personal data protection, as well as to enhance their ability to properly identify and handle situations involving the processing of personal data in the course of their professional activities.

       The training covered the main provisions of Law No. 195/2024, with a focus on the principles relating to the processing of personal data, the legal bases for processing, the rights of data subjects, and the obligations of controllers. Other topics included providing information to data subjects, the processing of special categories of personal data, the disclosure of personal data to third parties, data retention periods, as well as the technical and organisational measures necessary to ensure the security of personal data.

       Participants showed particular interest in practical situations encountered in their day-to-day activities, including the collection and use of customer data, employees’ access to information, the disclosure of personal data to third parties, handling data subjects’ requests, and the actions to be taken in the event of a personal data breach.

       The interactive discussions and practical examples presented during the training enabled participants to clarify specific situations and gain a better understanding of how legal requirements should be implemented in their professional activities. The training also highlighted that personal data protection is the responsibility of all employees who, in the course of their duties, have access to such data.

       By organising this activity, the NCPDP continues its efforts to inform and raise awareness among organisations in the Republic of Moldova about the new legal requirements in the field of personal data protection, thereby contributing to strengthening compliance and promoting an organisational culture based on accountability and respect for the rights of data subjects.

       A total of 50 representatives of Chișinău-Gaz LLC were trained.

       On 17 August 2026, the National Center for Personal Data Protection (NCPDP) organized a training course for employees of the Central Municipal Clinical Hospital, aimed at strengthening the professional knowledge and skills of the institution’s staff in the field of personal data protection and supporting the proper application of the legal framework in the healthcare institution’s activities.

       The training course forms part of the NCPDP’s efforts to inform, train and raise awareness among institutions about the importance of personal data protection and takes place in a particularly important context: on 23 August 2026, Law No. 195/2024 on personal data protection enters into force, strengthening the national legal framework and aligning it with European standards in this field.

       During the event, the main provisions of the new legal framework were presented and discussed, including the principles relating to the processing of personal data, the legal bases for processing, the rights of data subjects, and the obligations of controllers. Particular emphasis was placed on the specific aspects of processing data concerning health, given their particularly sensitive nature and the need to ensure an appropriate level of protection.

       Participants also discussed the confidentiality and security of patients’ data, the prevention of unauthorized access to and disclosure of information, the secure transmission of data, the management of security incidents, as well as the role and responsibilities of the Data Protection Officer (DPO). The topics covered were complemented by practical examples and concrete situations relevant to the day-to-day activities of a healthcare institution.

       The training highlighted that, in the healthcare sector, personal data protection is not merely a legal obligation, but also an essential component of respecting patients’ privacy, dignity and rights. Every employee who processes or has access to personal data plays an important role in preventing their unauthorized disclosure, loss or misuse.

       Among the key takeaways from the training were the need for a responsible approach to personal data at every stage of processing, restricting access to personal data based on the duties and responsibilities of authorized persons, paying particular attention to appropriate security measures, and promptly reporting any potential security incidents. At the same time, continuous staff training represents an important tool for preventing risks and strengthening an institutional culture focused on personal data protection.

       Through this activity, the NCPDP reaffirms its commitment to supporting public and private institutions in understanding and properly applying personal data protection rules, thereby contributing to a high level of protection of individuals’ rights and freedoms.

       A total of 60 representatives of the Central Municipal Clinical Hospital participated in the training.

       On 14 August 2026, the National Centre for Personal Data Protection (NCPDP) held a new training course on personal data protection, aimed at employees of the National Office of Social Insurance (CNAS).

       The training forms part of the implementation of the Training Plan on personal data protection for CNAS staff, signed by the head of the NCPDP and the CNAS on 8 July 2026, with the aim of strengthening staff members’ knowledge and professional skills, as well as ensuring the correct and uniform application of legal provisions in the institution’s activities.

       The aim of the course was to strengthen the abilities of CNAS staff regarding the lawful, fair and transparent processing of personal data, as well as to contribute to a better understanding of the responsibilities assigned to staff in the process of collecting, using, storing and transferring data.

       Training is important for the work of the CNAS, given the volume and nature of the personal data processed in the course of the institution’s duties and in the provision of social services. Compliance with data protection requirements helps to ensure the lawfulness of internal processes, prevent security incidents and protect the rights and freedoms of data subjects.

       The training covered the main principles applicable to the processing of personal data, the conditions for lawful processing, the rights of data subjects and the obligations of controllers. Issues relating to ensuring data confidentiality and security, staff responsibility in the processing activity, risk prevention and the management of situations that may affect the security of personal data were also addressed. Particular emphasis was placed on the new provisions of Law No. 195/2024 on personal data protection, which will come into force on 23 August 2026, as well as on the need for institutional preparation for their implementation.

       The course was delivered online, with 95 staff members from the CNAS’s regional offices taking part. Delivering the training in this format ensured the participation of a large number of the institution’s representatives and facilitated their access to the information and recommendations provided by specialists in the field.

       By continuing the training sessions set out in the Cooperation Plan, the NCPDP and the CNAS are strengthening their cooperation with a view to developing staff’s professional skills and ensuring the proper implementation of the new legal framework on personal data protection.

       On 13 August 2026, the National Centre for Personal Data Protection (NCPDP) organised a TAIEX expert mission entitled ”Cross-border transfers of personal data to third countries or international organisations”, aimed at strengthening institutional capacity in the field of international data transfers.

       The aim of the mission was to explore in greater depth the implications and challenges associated with cross-border transfers of personal data, with a focus on data protection, the application of the European legal framework and the identification of the mechanisms necessary to ensure lawful and secure transfers.

       The event brought together representatives from the NCPDP, the General Inspectorate of Police and the General Inspectorate of Border Police, providing a forum for dialogue, the exchange of experience and best practice regarding the application of the rules on international data transfers.

       During the mission, issues were discussed regarding the criteria for classifying an operation as a data transfer, the practical application of the GDPR within the European Union, the role of data protection authorities, and the challenges associated with the implementation of Chapter V of the GDPR. At the same time, the risks associated with cross-border transfers, data security measures, transfer standards and mechanisms, adequacy decisions and other recognised instruments were analysed, along with case studies and practical examples.

       Mr Matej Sironic, an adviser on personal data protection at the Information Commissioner’s Office of the Republic of Slovenia, participated as a European expert and presented european experience and best practices in the field of international data transfers.

       The mission helped to strengthen the participants’ professional capacities and to draw on European experience with a view to implementing Law No. 195/2024 on personal data protection, which will come into force on 23 August 2026.

       The NCPDP reaffirms its commitment to continuing to cooperate with its european and international partners with a view to strengthening an effective system for personal data protection.

       The expert mission was organised and funded by the European Commission’s Technical Assistance and Information Exchange Instrument (TAIEX).

       The National Centre for Personal Data Protection (NCPDP) announces the launch of a public awareness video, produced in the context of the entry into force, on 23 August 2026, of Law No. 195/2024 on personal data protection.

       The new law establishes a modern and coherent legal framework in the field of personal data protection, with the aim of strengthening the protection of individuals’ fundamental rights and freedoms in relation to the personal data processing, as well as establishing clear rules and appropriate responsibilities for controllers and processors in the processing such data.

       In this context, the video aims to inform and raise public awareness of the new legal provisions and the importance of respecting the right to personal data protection. It presents, in an accessible manner, issues relevant to citizens and organisations, including what constitutes personal data, examples of such data, the rights of data subjects, and the responsibilities of those who collect and process this data.

       At the same time, the document highlights the need for a responsible approach to personal data processing, including compliance with legal requirements, ensuring data security and confidentiality, and taking appropriate measures to prevent and manage any security incidents.

       By publishing this document, the NCPDP aims to support the process of informing the public, controllers and data subjects with the provisions of the new legal framework, thereby helping to raise awareness of the importance of personal data protection and to promote a culture of responsibility in this area.

       The entry into force of Law No. 195/2024 represents an important step in strengthening the national framework for personal data protection, and a proper understanding and application of the new provisions are essential to ensuring an adequate level of protection for individuals’ fundamental rights and freedoms.

       The video was produced by the NCPDP, with the support of the regional project „Public Administration Reform in the Eastern Partnership Countries”, implemented by the German Agency for International Cooperation (GIZ) and funded by the German Federal Ministry for Economic Cooperation and Development (BMZ).

       The video can be viewed by clicking on the following link: https://datepersonale.md/videogalerie

       On 4 August 2026, the National Centre for Personal Data Protection (NCPDP) organised the TAIEX expert mission entitled “Effective regulation of financial penalties. Setting fines”, aimed at strengthening institutional capacity regarding the application of corrective measures and administrative sanctions in the field of personal data protection.

       The event brought together experts from European Union Member States and representatives of the NCPDP, with the aim of supporting the national supervisory authority in preparing for the effective, consistent and proportionate exercise of its powers to impose corrective measures and administrative financial penalties, in the context of implementing the new regulatory framework for personal data protection.

       Given the need to implement Law No. 195/2024 on personal data protection, which will come into force on 23 August 2026 and which transposes the provisions of Regulation (EU) 2016/679 (GDPR), the NCPDP is strengthening its institutional capacities to carry out its new supervisory and enforcement powers.

       The main aim of the TAIEX expert mission was to facilitate the exchange of experience and European best practice regarding the conduct of inspections, the taking of evidence, the establishment of infringements, the application of corrective measures and the imposition of administrative fines, so that these are effective, proportionate and justified in accordance with European standards.

       The event’s agenda included thematic sessions dedicated to:

• the conduct of inspections and procedural stages, from the taking of evidence to the establishment of infringements;
• the application of corrective measures and the criteria for determining administrative fines;
• the assessment of aggravating and mitigating circumstances in the process of tailoring sanctions;
• ensuring the proportionality, consistency and legal soundness of sanctioning decisions;
• analysing case studies on the application of corrective measures and administrative sanctions;
• developing internal methodological tools for assessing infringements and justifying administrative decisions.

        During the working sessions, practical examples were presented regarding the organisation and conduct of investigations, the assessment of evidence and the justification of sanctioning decisions; specific scenarios were also analysed, enabling the exchange of experience and the identification of solutions applicable to the work of the NCPDP.

       Ms Agnieszka Giewon and Mr Bartłomiej Kohnke participated as international experts, presenting the experience and best practices of the Polish authorities regarding the application of corrective measures and administrative sanctions in the field of personal data protection. Through practical examples and case studies, the experts provided participants with a practical insight into the mechanisms for establishing infringements, tailoring sanctions and justifying administrative decisions, in accordance with European standards.

       The discussions highlighted the importance of developing internal procedures and methodological tools to ensure a uniform and consistent approach to the exercise of supervisory and sanctioning powers, thereby contributing to the strengthening of the NCPDP’s institutional capacity with a view to the implementation of the new legal framework.

       The TAIEX expert mission helped to strengthen the professional capacities of NCPDP specialists and to adopt European best practices regarding the application of corrective measures and administrative sanctions, thereby supporting the process of implementing Law No. 195/2024 on personal data protection.

       The NCPDP reaffirms its commitment to continuing its cooperation with European and international partners with a view to developing an effective and coherent supervisory system that ensures respect for individuals’ fundamental rights and freedoms in the context of the processing of personal data.

       The expert mission was organised and funded by the European Commission’s Technical Assistance and Information Exchange Instrument (TAIEX).

       On 31 July 2026, the National Centre for Personal Data Protection (NCPDP) organised an online training course on personal data protection for representatives of the National Office of Social Insurance (CNAS).

       The aim of the training was to help strengthen CNAS staff’s knowledge of the new requirements applicable to personal data protection, as established by Law No. 195/2024 on personal data protection, which ensures that the national regulatory framework is aligned with European standards in this area.

       The training covered the main obligations of data controllers, the principles applicable to data processing, and the responsibilities of public authorities and institutions in ensuring that the rights of data subjects are respected. Issues relating to the implementation of appropriate technical and organisational measures to ensure data security, the identification and management of risks, the notification of security incidents, and the recording and documentation of personal data processing operations were also discussed.

       At the same time, participants examined scenarios relevant to their activities, with a focus on the risks associated with the improper personal data processing and the measures to be taken to prevent and mitigate them. The interactive session provided clarification on practical aspects concerning the application of the principles of lawfulness, necessity and proportionality in the context of personal data processing operations.

       By organising these training activities, the NCPDP is strengthening its role in supporting public authorities in developing the skills necessary for the correct application of personal data protection legislation, thereby helping to promote an institutional culture based on accountability, compliance and adherence to best practice.

       The training course was held online and was attended by 106 representatives of the National Office of Social Insurance.

       On 6 August 2026, the National Centre for Personal Data Protection (NCPDP) organised a new training course for individuals appointed by controllers or by processors to act as Data Protection Officers (DPOs).

       This initiative forms part of the NCPDP’s ongoing training programme and aims to consolidate the knowledge and develop the professional skills of those acting as DPOs, in the context of the implementation of the new regulatory framework for personal data protection.

       The training session covered topical issues relating to the status and duties of the Data Protection Officer, the conditions for appointment, independence in the performance of their duties, cooperation with the supervisory authority, as well as the responsibilities of controllers and processors in ensuring compliance with the relevant legislation.

       At the same time, participants had the opportunity to analyse practical examples and ask questions regarding the challenges encountered in their day-to-day work, with clarifications and recommendations provided on the application of the provisions of Law No. 195/2024 on personal data protection, which will come into force on 23 August 2026.

       By organising these training sessions, the NCPDP aims to support controllers and processors in implementing the legal requirements and in fostering an organisational culture based on respect for the right to personal data protection.

       The NCPDP will continue to carry out training and awareness-raising activities aimed at both Data Protection Officers and representatives of public authorities, the private sector and other categories of controllers, with a view to ensuring the uniform and effective application of legislation in the field of personal data protection.

       22 Data Protection Officers took part in the event.

       On 30 July 2026, the Parliament of the Republic of Moldova adopted, at second reading, the draft law on the protection of personal data processed for the purpose of preventing and combating crime, a legislative act transposing into national law Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA

       The adoption of this draft law represents an important step in the process of harmonising the legislation of the Republic of Moldova with European Union standards in the field of personal data protection and complements the regulatory framework established by Law No. 195/2024 on personal data protection, which is due to enter into force on 23 August 2026.

       The new legislation lays down specific rules on how the competent authorities – criminal investigation bodies, public prosecutors’ offices, courts and other authorised institutions – process personal data for the purposes of preventing or combating crime, investigating criminal offences, conducting criminal proceedings or enforcing sentences and security measures.

       In this regard, the law sets out clear obligations for the competent authorities concerning the lawfulness of processing, the restriction of data use to the purposes provided for by law, compliance with the principle of data minimisation, and the implementation of the technical and organisational measures necessary to ensure the security and confidentiality of such data.

       The draft was reviewed by representatives of the European Commission, who gave a positive opinion on the document and noted that, together with Law No. 195/2024 on personal data protection, it contributes to the consolidation of a modern regulatory framework aligned with European Union standards.

       The adoption of this law reaffirms the Republic of Moldova’s commitment to establishing an effective system for personal data protection in the field of law enforcement, in accordance with European standards and the objectives of the process of integration into the European Union.

       On July 29, 2026, the National Center for Personal Data Protection (NCPDP) organized a training session for representatives of the e-Governance Agency, with the aim of strengthening their professional capabilities regarding the application of personal data protection legislation.

       The event is part of the training activities conducted by the NCPDP for public authorities, designed to support the effective implementation of the provisions of Law No. 195/2024 on personal data protection and the development of institutional practices compliant with European standards in this field.

       The training covered the main obligations of controllers, the principles that must be observed in the data processing procedure, and the responsibilities of public institutions in ensuring the rights of data subjects. Additionally, the session addressed issues related to the implementation of appropriate technical and organizational measures for data protection, risk assessment, security incident management and the documentation of processing activities.

       The principles of “privacy by design” and “privacy by default” are particularly relevant to the e-Governance Agency. These principles involve integrating data protection measures right from the platform design stage and limiting access to data to authorized individuals only, as well as applying, by default, settings that provide the highest level of personal data protection.

       At the same time, participants analyzed examples and practical scenarios from their professional experience, addressing the main risks posed by the improper processing of personal data, as well as the measures needed to prevent and mitigate them. The interactive discussions provided an opportunity to clarify practical aspects regarding compliance with the principles of lawfulness, necessity and proportionality in the personal data processing procedure.

       By organizing such activities, the NCPDP continues to promote the development of professional competencies among public authorities and to support the uniform application of legislation in the field of personal data protection, thereby contributing to the consolidation of an institutional framework based on accountability, compliance and best practices.

       Approximately 70 representatives of the e-Governance Agency were trained during the event.