On November 11, 2024, the representatives of the National Center for Personal Data Protection (CNPDCP) organized a training course in the field of personal data protection for representatives of the State Tax Service (SFS), at their request.

The purpose of the training course was to familiarize tax officials with aspects related to the protection of personal data in the public service, the regulation of processing procedures, the confidentiality and security regime of personal data in accordance with the provisions of the legislation in force.

During the event, important topics were discussed, such as: the definition of general notions related to the field of personal data protection; the rights of personal data subjects; the processing of special categories of personal data; principles and legal grounds for personal data processing; issues related to the appointment of the Data Protection Officer (DPO), as well as the obligations and tasks of a DPO; issues related to the Data Protection Impact Assessment, etc.

The training course was an interactive one. The participants asked the trainers many questions on the legal aspects related to the protection of personal data when exercising their duties. At the same time, access to information of public interest under the personal data protection legislation, the examination of requests for disclosure of personal data, as well as ensuring the security and confidentiality of personal data by FSS employees, were of particular interest to the participants.

About 120 representatives of the State Tax Service were trained during the event.

On 06 November 2024, the National Center for Personal Data Protection (NCPDP) organized a training course in the field of personal data protection for the directors of educational institutions from Chisinau municipality, at the request of the General Directorate of Education, Youth and Sport.

The training course aimed to increase the awareness of the directors of educational institutions on the principles of personal data protection, as well as to strengthen their capacities regarding the processing of personal data in accordance with the legal provisions.

During the event, important topics were discussed, such as: the definition of general notions related to the field of personal data protection; the rights of personal data subjects; the processing of special categories of personal data; the principles and legal grounds for processing personal data; the requirements for the protection of personal data in the exercise of official duties; ensuring the security and confidentiality of personal data processed, etc.

The training course proved to be interactive and useful, and the topics related to the legality of installing video surveillance cameras in classrooms, the disclosure of information containing personal data to third parties, as well as the obligation to ensure the confidentiality and security of such data, were of great interest to the participants.

About 170 directors of educational institutions in Chisinau municipality were trained during the event.

On 05 November 2024, representatives of the National Center for Personal Data Protection organized a training course for representatives of the General Directorate of Medical and Social Assistance of the Chisinau Municipal Council, at their request.

The aim of the training course was to familiarize the DGAMS officials with the aspects related to personal data protection in the public service, the regulation of processing procedures, the confidentiality and security regime of personal data in accordance with the normative framework.

During the event, important topics were discussed, such as: the definition of general notions related to the field of personal data protection; the rights of personal data subjects; the processing of special categories of personal data; the principles and legal grounds for processing personal data; the requirements for the protection of personal data in the exercise of the duties of the office; issues related to the appointment of the Data Protection Officer (DPO); the obligations and tasks of a DPO; issues related to the Data Protection Impact Assessment (DPIA); the stages and obligation to perform a DPIA, etc.

The training course proved to be a useful one, participants asking the trainers multiple questions and receiving documented answers with practical examples. At the same time, the issues related to the disclosure of information containing personal data, the analysis carried out by the data controller in terms of access to these data, ensuring the security and confidentiality of personal data processed, the term of retention/storage and use of personal data at the end of the processing operations, as well as legal issues regarding the processing of personal data through video surveillance systems, were of great interest to the representatives of the course.

During the event 25 representatives of the General Directorate of Medical and Social Assistance of the Chisinau Municipal Council were trained.

On 30 – 31 October 2024, the representatives of the National Center for Personal Data Protection (NCPDP) participated in a study visit to the Latvian Data State Inspectorate (Inspectorate), an event organized within the project entitled “Strengthening personal data protection in the Republic of Moldova Phase I”.

The purpose of the study visit was to learn the best legal and operational practices from the representatives of the NCPDP on the certification of Data Protection Officers (DPOs), Data Protection Impact Assessment (DPIA), as well as to strengthen data protection mechanisms by aligning them with European standards and practices.

During the event, the Director of the Inspectorate, Jekaterina Macuka, presented the main tasks/activities of the institution, its role in promoting the field of personal data protection in Latvia, highlighting the challenges and opportunities in the field of personal data protection of both countries, as well as the continued cooperation and exchange of best practices.

During the two days, topics of importance were addressed, such as:

• Data Protection Officer certification: the purpose of DPO certification, who issues DPO certifications, who can apply to receive a DPO certification, what is the feedback from different stakeholders on these DPO certifications, etc.

• Presentation of the DPO certification scheme: conception, development and introduction of DPO certification: experiences, failures, successes and lessons learned;

• Privacy Impact Assessment in Latvia: how a DPIA is conducted, who is obliged to conduct a DPIA, the necessity of conducting a DPIA, training of other persons such as employees of public authorities on issues related to the privacy of personal data, etc.

The study visit was organized with the support of the Council of Europe Data Protection Unit and the Latvian State Data Inspectorate.

On October 30, 2024, the National Center for Personal Data Protection (NCPDP) organized a training course in the field of personal data protection for the directors of early education institutions in Chisinau municipality, at the request of the General Directorate of Education, Youth and Sport.

The training course aimed to increase the awareness of the directors of early childhood education institutions on the principles of personal data protection, as well as to familiarize them with the confidentiality and security of personal data in accordance with the provisions of the legislation in force.

The event discussed topics of importance such as:

• Definition of general notions related to the field of personal data protection; 

• Principles of personal data processing;

• Rights of personal data subjects; 

• Processing of special categories of personal data; 

• Legal grounds for processing personal data; 

• Requirements for the protection of personal data in the exercise of official duties;

• Examination of requests for disclosure of personal data;

• Ensuring the security and confidentiality of personal data processed, etc.

The training course proved to be an interactive one, with the participants asking multiple questions, based on the work they had carried out, to which they received documented answers with practical examples from the trainers. At the same time, the topics related to the disclosure of information containing personal data to third parties, the legality of installing video surveillance systems in kindergartens, as well as the possible negative consequences of publishing children’s photos/video recordings online were of great interest to the participants.

During the event, about 150 directors of early education institutions in Chisinau were trained.

On October 10, 2024, the National Center for Personal Data Protection organized a training course in the field of personal data protection for internal auditors of public authorities, at the request of the Association of Internal Auditors.

The aim of the training was to raise the visibility of the role of internal audit in adding value and improving the entity’s activity, including risk management, control and governance processes, in the light of the data protection legislation.

During the event, important topics were discussed, such as: the definition of general notions related to the field of personal data protection; the rights of personal data subjects; the processing of special categories of personal data; the requirements for the protection of personal data in the exercise of official duties; ensuring the security and confidentiality of personal data processed; issues related to the Data Protection Officer (DPO); issues related to the Data Protection Impact Assessment, etc.

The training course was an interactive one and the trainers provided advisory support to the participants on the processing of personal data in the context of auditing public entities. At the same time, multiple practical examples were presented in order to increase the perception of internal auditors on the principles of personal data protection.

The event was held remotely with the participation of about 40 representatives of the Association of Internal Auditors.

On October 17, 2024, the National Center for Personal Data Protection (NCPDP) organized a training course entitled “The legal regime of personal data protection” for the employees of the National Anti-Corruption Center (NAC), at their request.

The purpose of the training course was to increase the NAC employees’ awareness on the principles of personal data protection, in order to know and assimilate the best practices in the field, as well as to ensure the correct application of the legal provisions in the activity they perform.

During the event, important topics were discussed, such as: the definition of general concepts related to the field of personal data protection; the rights of personal data subjects; principles and legal grounds for processing personal data; the requirements for the protection of personal data in the exercise of the duties; ensuring the security and confidentiality of personal data processed; issues related to the appointment of the Data Protection Officer (DPO), as well as his obligations and tasks; issues related to the Data Protection Impact Assessment, etc.

At the same time, the topics related to the legal manner of processing personal data in the work carried out by NAC employees, the importance of personal data protection in the criminal prosecution actions carried out by them, the correct procedure for accessing personal data through state information systems and the records kept by the NAC of these accesses, the term of storage and use of personal data at the end of the processing operations, as well as access to information of public interest through the legislation on personal data protection, were of great interest to the participants.

About 170 NAC representatives were trained during the event.

On October 15, 2024, the National Center for Personal Data Protection (NCPDP) organized a training course in the field of personal data protection for representatives of the National Agency for Employment (ANOFM), at their request.

The purpose of the training course was to familiarize ANOFM officials with the aspects related to personal data protection in the public service, the regulation of processing procedures, as well as with the confidentiality and security of personal data in accordance with the legislation in force.

The event discussed topics of importance such as: 

• Definition of general notions related to the field of personal data protection; 

• Principles and legal grounds for processing personal data;

• The rights of personal data subjects; 

• Processing of special categories of personal data; 

• Requirements for the protection of personal data in the performance of official duties; 

• Ensuring the security and confidentiality of personal data processed; 

• Data Protection Officer (DPO) designation, duties and tasks; 

• Data Protection Impact Assessment (DPIA) issues as well as the steps involved in conducting a DPIA, etc.

The training course proved to be an interactive one, and the topics related to access to information of public interest from the point of view of the personal data protection legislation, the term of retention/storage and use of personal data at the end of processing operations, as well as the legality of requesting a copy of the identity card when submitting and/or examining an application, were of great interest to the representatives attending the course.

Around 200 ANOFM representatives were trained during the event, which took place both in person and online.

On October 10, 2024, the National Center for Personal Data Protection organized a training course in the field of personal data protection for internal auditors of public authorities, at the request of the Association of Internal Auditors.

The aim of the training was to raise the visibility of the role of internal audit in adding value and improving the entity’s activity, including risk management, control and governance processes, in the light of the data protection legislation.

During the event, important topics were discussed, such as: the definition of general notions related to the field of personal data protection; the rights of personal data subjects; the processing of special categories of personal data; the requirements for the protection of personal data in the exercise of official duties; ensuring the security and confidentiality of personal data processed; issues related to the Data Protection Officer (DPO); issues related to the Data Protection Impact Assessment, etc.

The training course was an interactive one and the trainers provided advisory support to the participants on the processing of personal data in the context of auditing public entities. At the same time, multiple practical examples were presented in order to increase the perception of internal auditors on the principles of personal data protection.

The event was held remotely with the participation of about 40 representatives of the Association of Internal Auditors.

On October 28, 2024, the National Center for Personal Data Protection (NCPDP) organized a training course in the field of personal data protection for the representatives of General Directorate of Education, Youth and Sport subdivisions (DGETS) of Chisinau Municipal Council, at their request.

The training course aimed to increase the awareness of DGETS employees on the principles of personal data protection, as well as to familiarize them with the confidentiality and security of personal data in accordance with the provisions of the legislation in force.

During the event, important topics were discussed, such as: the definition of general notions related to the field of personal data protection; the rights of personal data subjects; the processing of special categories of personal data; the principles and legal grounds for processing personal data; the requirements for the protection of personal data in the exercise of official duties; ensuring the security and confidentiality of personal data processed, etc.

The training course was interactive, and the topics related to the disclosure of information containing personal data, as well as the term of retention/storage and use of personal data at the end of the processing operations were of great interest to the course participants.

About 40 representatives of DGETS subdivisions were trained during the event.