On 20 March 2024, the National Centre for Personal Data Protection (NCPDP) organised two training courses on personal data protection for employees of the Eastern Regional Directorate of the General Inspectorate of Border Police (IGPF).

The aim of the training courses was to increase the awareness of the employees of the Eastern Regional Directorate of the IGPF on the principles of personal data protection, as well as on ensuring the correct application of the legal provisions in the field, in the activity they carry out.

During the trainings important topics were discussed, such as: 

Definition of general notions related to the field of personal data protection; 

Principles and legal grounds for personal data processing; 

The rights of personal data subjects; 

Processing of special categories of personal data; 

Requirements for the protection of personal data in the exercise of official duties; 

Ensuring the security and confidentiality of personal data processed; 

Issues relating to the appointment of the Data Protection Officer (DPO);

Data Protection Impact Assessment (DPIA) issues; 

Legal aspects of personal data processing through video surveillance systems, etc.

The training courses proved to be interactive and useful, and issues related to the examination of requests for disclosure of personal data, the correct procedure for accessing personal data through state information systems, as well as the correct procedure for identifying persons who do not have identity documents, were of great interest to the course participants.

About 60 representatives of the Eastern Regional Directorate of the IGPF were trained during the events.

The training courses are part of the IGPF training plan for 2024, approved and signed by the heads of the NCPDP and IGPF on 21 February this year.

From 11 to 13 March 2024, the representatives of the National Centre for Personal Data Protection (NCPDP) made the study visit “Processing of personal data through video surveillance systems”. The event was hosted by the Spanish Data Protection Authority (AEPD) – Agencia Española de Protección de Datos.

The purpose of the event was both to take up legal and operational best practices on the use of video surveillance means, and to provide employees of the NCPDP with the skills and resources necessary to effectively address issues related to the processing of personal data through video surveillance systems, in accordance with current legislation and in the interest of protecting the rights of data subjects.

During the study visit, moderated by experts in the field of personal data protection from the AEPD, topics of importance were analysed in depth, such as: the evolution of video-surveillance regulations, the latest legislative changes and regulations related to personal data processing through video-surveillance systems, with a focus on GDPR regulations; data subjects’ rights and ethics in video-surveillance; reception and classification of complaints; inspection procedures and instructions; technical and organisational measures to ensure the security of personal data; promotion of technologies applied to video-surveillance, etc.

The study visit was organised with the support of the EU TAIEX Project – Technical Assistance and Information Exchange Instrument, managed and funded by the Directorate-General for European Neighbourhood Policy and Enlargement Negotiations (DG NEAR) of the European Commission.

Personal data is processed every second around the world – at work, when dealing with public authorities, in healthcare, when trading goods or services, when travelling abroad or when surfing the internet.

Every year, on 28 January, the European community celebrates “European Data Protection Day”. This year marks the 18th edition and 43 years since the adoption of Convention 108 for the protection of individuals with regard to automatic processing of personal data in Strasbourg on 28 January 1981.

The purpose of Convention No 108 is to ensure in the territory of each State Party, respect for the fundamental rights and freedoms, and in particular the right to privacy with respect to the processing of personal data, of every individual, regardless of nationality or residence.

It is a very special day, not only for the member states of the Council of Europe, but also for the entire Global Data Protection Community and, above all, for every individual protected by this fundamental right.

To this end, Council of Europe member states and others are organising various activities and public events to mark the day. The Republic of Moldova marks this event together with all European countries. Although the field of personal data protection is a relatively new one for Moldovan society, we have managed to make great strides in the last decade in ensuring respect for the right to privacy and in efforts to align with European standards in the field of personal data protection.

Our role as the National Data Protection Authority is becoming increasingly important and the annual celebration of this day is an opportunity to bring to the attention of the public the importance of respecting the principles of personal data processing, the right to privacy and the right to personal data protection, enshrined as fundamental rights.

Today, 26 January, the National Centre for Personal Data Protection (CNPDCP) in collaboration with TAIEX project experts is organising the national conference “Raising Awareness on the Convention 108+”.

The aim of the conference is to raise awareness of both public institutions and the private sector about Convention 108 + as a viable tool to facilitate international data transfers, thus ensuring an adequate level of protection for data subjects globally.

The event was opened by the Director of the NCPDP, Ms Victoria Muntean: “Convention 108+ is an essential pillar in ensuring an adequate level of protection for data subjects globally. In an age where data is the currency of progress, it is crucial to ensure that it is treated with respect and security. This conference is a significant step in the right direction, bringing to the attention of both public institutions and the private sector a comprehensive perspective on Convention 108+ and its impact in facilitating international data flows. The topicality of this issue is all the more important in the context of the signing by the Republic of Moldova, on 9 February 2023, of the Protocol amending Convention 108+. We are now at a crucial moment in the process of securing the ratification of this document, which brings with it new and modern rules in the field of personal data protection. The Protocol amending Convention 108+ is a clear manifestation of our firm commitment to international standards and to the fundamental rights of individuals with regard to the processing of personal data.”

The conference is moderated by data protection experts from Italy, Slovenia and Spain. Among the topics addressed by the experts are: the impact of Convention 108+ on adequacy decisions and data transfers, with a focus on compliance with the EU acquis; Convention 108+ as a viable tool to facilitate international data transfers while ensuring an adequate level of protection for individuals worldwide; Convention 108+ as a bridge between legal regimes and countries; the ratification process of Convention 108+; lessons learned and advice from ratifying countries; Convention 108+: the Evaluation and Review Mechanism, etc.

Around 100 representatives from both public institutions and the private sector will participate in the event.

The workshop is organised and funded by the European Commission Technical Assistance and Information Exchange Instrument (TAIEX).

On 5 December 2023, the National Center for Personal Data Protection (NCPDP) organized a training course on personal data protection for employees of the Chisinau Police Department.

The aim of the training course was to increase the perception of the employees of the Chisinau Police Department on the principles of personal data protection, as well as on the correct application of the legal provisions in the field, in the activity they carry out.

During the event important topics were discussed, such as: definition of general notions related to the field of personal data protection; rights of personal data subjects; processing of special categories of personal data; the legal way of personal data processing in the work carried out by police bodies; requirements for the protection of personal data in the performance of duties; ensuring the security and confidentiality of personal data processed; the correct procedure for accessing personal data through the State Information Systems, as well as keeping correct audit records of such accesses; issues related to the appointment of the Data Protection Officer (DPO), as well as his/her obligations and tasks; issues related to the Data Protection Impact Assessment (DPIA), as well as the steps to carry out a DPIA, etc.

The training course proved to be an interactive one, participants asking multiple questions, based on their work, and receiving documented answers with practical examples from the trainers.

About 80 representatives of the Chisinau Police Department were trained during the event.

The training course is part of the training plan for GPI subdivisions for 2023, approved and signed by the heads of NCPDP and GPI on 25 January this year.

In the period 18-19 October, the representatives of the National Centre for Personal Data Protection (NCPDP) carried out a study visit entitled “Reconciling the right of access to information and personal data protection“. The event was hosted by the French National Commission for Information Technology and Civil Liberties (CNIL).

The purpose of the event was to take up the best legal and operational practices on mechanisms to reconcile the right of access to information and the protection of personal data.

During the study visit, moderated by experts in the field of personal data protection from the CNIL and CADA – Commission for Access to Administrative Documents, topics of importance such as: protection of personal data in the exercise of the right of access to information; reconciling the right of access to information and the right to protection of personal data; request for access to administrative documents or exercise of the right of access by the data subject, how to distinguish them and what is the impact; publication and re-use of data of public interest; re-use of data of public interest for scientific research purposes, etc. have been analysed and discussed.

The study visit was organised with the support of the EU TAIEX project – Technical Assistance and Information Exchange Instrument, managed and funded by the Directorate-General for European Neighbourhood Policy and Enlargement Negotiations (DG NEAR) of the European Commission.

On 18 October 2023, representatives of the National Centre for Personal Data Protection (NCPDP), organized a training course for employees of the Regional Directorate “Centre” of the General Inspectorate of Carabineers (GIC), with the title: “Ensuring the protection of personal data in the work of the General Inspectorate of Carabineers”, at the request of the Ministry of Internal Affairs.

The aim of the course was to increase the perception of GIC employees on the principles of personal data protection, as well as on ensuring the correct application of the legal provisions in the field in their work.

During the event important topics were discussed, such as: definition of general notions related to the field of personal data protection; rights of personal data subjects; processing of special categories of personal data; principles and legal grounds for personal data processing; the legal way of processing personal data in the activity carried out by the GIC; requirements for the protection of personal data in the exercise of service tasks; the obligations of the GIC as data controller in relation to the data subject; issues concerning the disclosure of information containing personal data and the GIC’s analysis of access to such data; ensuring the security and confidentiality of personal data processed; the examination of requests for disclosure of personal data, etc.

The training course proved to be useful one, participants asking the trainers many questions about practical examples in the field of personal data protection.

   Around 40 representatives of the Regional Directorate “Centre” of the General Inspectorate of Carabineers were trained during the event.

On October 17, the representatives of the National Center for Personal Data Protection (NCPDP) participated in the Conference “GDPR4BUSINESS”, organized by the National Association of ICT Companies within the ABA Rule of Law Initiative Project “Personal Data Protection – Rights and Obligations in the Republic of Moldova” in partnership with the European Business Association (EBA Moldova).

At the opening session, the Deputy Director of the NCPDP, Angela COLOMIICENCO, thanked the National Association of ICT Companies and its partners for their contribution to the initiation and organisation of the conference, welcoming the participation of business, civil society and representatives of public institutions in the event, which she described as testimony to the strengthening of cooperative relations in the field of personal data protection.

Ms Angela COLOMIICENCO said: “We are all witnessing a rapid transformation of the digital world, a world in which personal data is ubiquitous. The ever-increasing demand for personal data is accompanied by an increase in their value, on a social, political and economic level. In this context, data protection becomes essential for the rights and freedoms of individuals but also for increasing citizens’ trust that data controllers will respect the conditions of processing and will ensure data security, and an important role in this respect is played by data protection legislation, as well as by the NCPDP, which contributes strongly to the alignment of national legislation with the General Data Protection Regulation and the EU acquis. This legislative harmonisation is necessary in order to maintain the upward trend of personal data protection and not to allow a regression of the field, as well as to continue to ensure a genuine respect for the rights of personal data subjects and a legally secure territory for personal data controllers. NCPDP believes that the Republic of Moldova must have balanced and clear rules, without deviations from the GDPR, we need a comprehensive legislative framework for the protection of personal data, because the latest changes in the social sphere have shown that the complexity of personal data processing operations depends on various new circumstances related to the development of information technologies that the state often fails to regulate“.

Mr. Alexei STRAHOV, Head of the Prevention, Surveillance and Evidence Department, participated in the conference as an expert on behalf of the NCPDP, who addressed the topic “Data Protection Officer” (DPO), highlighting the newest and important aspects required by the provisions of Law 133/2011 on the protection of personal data, appointment of the DPO, DPO function, and DPO tasks.

At the same time, the conference presented practices with applicable content for business and representatives of public authorities, such as:

• Key aspects of the draft law on Personal Data Protection;
• international and regional experience in the application of GDPR;
• solutions and responses to situations, cases and challenges faced by business and public authorities in implementing the harmonised legal framework.

   During the event, as speakers, participated state officials, national and international experts in the field of data protection.

On 16 October 2023, representatives of the National Centre for Personal Data Protection organized a training course for employees of Glodeni District Hospital with the title: “Legal provisions in the field of personal data protection”.

The aim of the course was to strengthen the capacities of medical staff by familiarising, raising awareness and informing them about the field of personal data protection.

The event covered important topics such as:

• Definition of personal health data;
• Processing of special categories of personal data;
• Legal grounds for processing personal data concerning health;
• Patients’ rights;
• The mandatory secrecy of personal data;
• Disclosure of personal health data;
• Data minimisation and storage limitation;
• Processing of personal data in the work of health professionals;
• Obligation to ensure confidentiality and security of data processing; etc.

The training course, moderated by the representative of the Prevention, Surveillance and Evidence Directorate, proved to be a useful one, with participants asking the trainer many questions about practical examples in the field of personal data protection. At the same time, the topics related to the processing of personal data in the activity carried out by medical staff, the patient’s right to confidentiality of information related to medical confidentiality, as well as the disclosure of such data to the patient’s legal representative, were of particular interest to the participants.

About 90 representatives of Glodeni District Hospital were trained during the event.

On the 11^th of October 2023, the representatives of the National Centre for Personal Data Protection (NCPDP) organized a training course for employees of the Regional Directorate “Centre” of the General Inspectorate of Carabineers (IGC), entitled: “Ensuring the personal data protection in the work of the General Inspectorate of  Carabineers “, at the request of the Ministry of Internal Affairs.

The aim of the course was to increase the perception of IGC employees on the principles of personal data protection, as well as on ensuring the correct application of the relevant legal provisions in their work.

During the event important topics were discussed, such as:

• Definition of general notions related to the field of personal data protection;
• The rights of personal data subjects;
• Processing of special categories of personal data;
• Principles and legal grounds for personal data processing;
• The legal modalities of processing personal data in the activity carried out by the IGC;
• Requirements for the protection of personal data in the exercising of the work tasks;
• The obligations of the IGC as data controller in relation to the data subject;
• Disclosure aspects of information containing personal data and the analysis carried out by the IGC in relation to access to such data;
• Ensuring the security and confidentiality of personal data processed;
• Examination of requests for disclosure of personal data, etc.

The training course proved to be a useful one, with participants asking the trainers many questions about practical examples in the field of personal data protection.

About 50 representatives of the Regional Directorate “Centre” of the General Inspectorate of Carabineers have been trained during the event.