On June 29, 2026, the National Center for Personal Data Protection (NCPDP) organized a training session for representatives of the Association of Auditors and Audit Firms “AFAM,” at their request.

       The session aimed to strengthen participants’ knowledge and develop their practical skills in the field of personal data protection, with an emphasis on the correct and uniform application of the provisions of Law No. 133/2011 on personal data protection, as well as relevant standards and best practices in this area.

       The session addressed in detail the fundamental principles of personal data processing, including lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; and ensuring data integrity and confidentiality. The session also highlighted the essential role of adhering to these principles in audit work, where access to significant volumes of information entails a high level of responsibility.

       Another important topic concerned establishing the legal grounds for personal data processing, with an emphasis on the need to correctly identify these grounds based on the specific context of audit and verification activities. The obligations of controllers and processors were also discussed, including those related to documenting processing activities, maintaining internal records and respecting the rights of data subjects.

       Participants were also informed about the importance of implementing appropriate technical and organizational measures to ensure data security, prevent unauthorized access, loss or improper disclosure of information, as well as the need for periodic risk assessments related to processing activities.

       At the same time, practical aspects of audit work were presented, including common situations regarding auditors’ access to personal data, the legal limits of such access and the need to comply with the principles of proportionality and data minimization during audit and control engagements.

       The session also included an active exchange of views and questions from participants, who addressed specific situations from their professional practice, thereby helping to clarify certain practical aspects and foster a better understanding of the regulatory framework.

       The NCPDP welcomes the interest shown by representatives of the “AFAM” Association in deepening their knowledge in the field of data protection and reiterates the importance of ongoing training for professionals who, in the course of their duties, process personal data, with a view to ensuring a high level of compliance and the effective protection of the fundamental rights and freedoms of data subjects.

       The event, held online, was attended by 55 representatives of the “AFAM” Association of Auditors and Audit Firms.

On June 24–25, 2026, representatives of the National Center for Personal Data Protection (NCPDP) participated in the 77th meeting of the International Working Group on Data Protection in Technology (IWGDPT), known as the “Berlin Group.” The event took place in Warsaw, Poland, at the invitation of Poland’s Office for Personal Data Protection (UODO).

The event brought together international experts in the field of data protection, with the primary objective of strengthening international cooperation and analyzing the impact of new technologies on the right to privacy and the protection of personal data.

Over the course of the two-day meeting, participants addressed a number of current topics, including:

• the use of artificial intelligence and how organizations can adapt their operations to better protect personal data;
• extended reality (XR), new ways for users to manage their data privacy preferences and the use of cloud services;
• the evolution of new communication technologies and their impact on the personal data protection;
• the use of artificially generated data and its role in the development of new digital services;
• the protection and use of data belonging to deceased individuals, from both a legal and ethical perspective;
• the exchange of experiences and best practices among data protection authorities from different countries.

The meeting’s agenda also included presentations by international experts, “tour de table” sessions on recent developments at the national level, as well as thematic discussions focused on future directions for development in the field of emerging technologies and data protection.

The event served as an important forum for exchanging experiences and strengthening cooperation among data protection authorities worldwide, helping to identify common approaches to the challenges posed by rapid technological developments.

       On June 16, 2026, the National Center for Personal Data Protection (NCPDP) organized a training session for representatives of the Parliament of the Republic of Moldova, with the aim of strengthening their knowledge regarding the application of the regulatory framework in the field of personal data protection and familiarizing participants with the new regulations set forth in Law No. 195/2024 on the personal data protection.

       The training session aimed to deepen participants’ understanding of the new obligations and responsibilities incumbent upon public authorities in the processing of personal data, as well as to facilitate the uniform and effective application of legal provisions.

       During the session, key issues were addressed regarding the principles of personal data processing, the rights of data subjects, the legal grounds for processing, the responsibilities of controllers and processors, as well as the technical and organizational measures necessary to ensure data security and confidentiality.

       Particular emphasis was placed on the main changes introduced by Law No. 195/2024 on personal data protection, which aligns the national regulatory framework with European standards in this area. In this context, participants were briefed on the application of the principle of accountability, record-keeping of processing activities, data protection impact assessments, notification of personal data breaches, the strengthening of data subjects’ rights, as well as the new supervisory powers and enforcement mechanisms provided for by the legislation.

       In addition, the practical challenges faced by public authorities in their day-to-day processing of personal data were analyzed, with relevant examples and recommendations presented regarding the implementation of the necessary compliance measures in light of the new legal provisions.

       The event took place in an interactive format, offering participants the opportunity to ask questions and discuss practical issues specific to their work. The exchange of views and experiences contributed to a better understanding of institutional obligations and the measures necessary to ensure compliance with the right to personal data protection.

       By organizing this training session, the NCPDP reaffirms its commitment to supporting public institutions in the process of implementing the new legislative provisions and strengthening institutional capacities in the field of personal data protection.

       The event was attended by 90 officials from the Parliamentary Secretariat, including staff from the offices of public officials.

       The NCPDP will continue to conduct training and outreach activities for public institutions, with the aim of promoting a strong culture of personal data protection and ensuring the effective implementation of the provisions of Law No. 195/2024 on personal data protection.

       The National Center for Personal Data Protection of the Republic of Moldova (NCPDP) and the Agency for Cyber Security (ACS) have signed an inter-institutional cooperation agreement aimed at strengthening collaboration in the field of personal data protection and cyber security.

       The signing of the Agreement represents an important step in developing an effective mechanism for institutional cooperation, based on the exchange of information, technical expertise, best practices and the coordination of activities carried out within the areas of competence of the two institutions.

       The purpose of the Agreement is to strengthen inter-institutional relations and ensure effective and coordinated cooperation with a view to enhancing the level of personal data protection, preventing and effectively managing security incidents and strengthening national cyber resilience.

       Under the Agreement, the parties will cooperate in several areas of common interest, including: organizing and jointly participating in conferences, seminars, roundtables, training sessions and other relevant events;  the development and implementation of joint professional training programs for the staff of both institutions; the conduct of information and awareness campaigns on the personal data protection and cybersecurity; the promotion of a culture of data protection and cybersecurity among public authorities, the business community and citizens; joint participation in relevant international projects, initiatives, and programs; cooperation in managing security incidents and, where appropriate, conducting joint investigation and control activities, within the limits of legal authority; facilitating the exchange of information of mutual interest for the prevention and management of risks associated with cybersecurity and the personal data protection.

       At the same time, the Agreement provides for strict compliance with confidentiality requirements and the legal framework applicable to restricted-access information, including personal data processed within the framework of institutional cooperation.

       The signing of this Agreement reaffirms the joint commitment of the NCPDP and the ACS to strengthening institutional capacities and developing effective cooperation mechanisms to protect individuals’ fundamental rights and freedoms in the context of digital transformation and the challenges posed by cybersecurity.

       On May 11, 2026, the National Center for Personal Data Protection (NCPDP) organized the TAIEX workshop “Mechanisms for Ensuring the Lawfulness of Personal Data Processing.”

       The event brought together European experts and representatives of the NCPDP, with the aim of strengthening institutional capacities in the area of exercising supervisory and compliance functions regarding personal data protection legislation, in the context of the Republic of Moldova’s alignment with European Union standards.

       The workshop took place in a context marked by accelerated digital transformation and an increase in the volume of processed data, which require the strengthening of mechanisms to protect the fundamental right to privacy. At the same time, it took place in view of the entry into force of Law No. 195/2024 on personal data protection, which transposes the European acquis in this field.

       The main purpose of the event was to deepen understanding of how data protection authorities in European Union member states exercise their powers to oversee the lawfulness of data processing, as well as to identify effective solutions and best practices applicable to the work of the NCPDP.

       The event agenda included thematic sessions dedicated to:

• the regulatory framework and the role of supervisory authorities in the field of data protection;
• the conformity assessment process and methodologies for verifying compliance with legislation;
• control and audit mechanisms, including practices for monitoring and investigating violations;
• the use of modern technologies to ensure data security, such as encryption and pseudonymization;
• the analysis of case studies and relevant practical examples;
• criteria for establishing sanctions and assessing the impact of corrective measures applied.

       Mr. Bartłomiej Kohnke, a representative of the Polish Ministry of Justice, and Mr. Hristo Alaminov, a representative of the Bulgarian Commission for Personal Data Protection, participated as international experts. They presented the experience and practices of the institutions they represent, offering participants practical insights and useful tools for supervisory activities.

       The discussions highlighted the importance of developing effective oversight mechanisms based on risk assessment, transparency and the proportionate application of corrective measures, as well as the need to strengthen international cooperation in the field of data protection.

       Participants had the opportunity to analyze concrete procedures for conducting inspections, including the development of inspection methodologies, the conduct of internal and external audits as well as the application of sanctions in accordance with the severity of violations found..

       The TAIEX workshop contributed to the exchange of experiences and the adoption of European best practices, supporting the NCPDP in its institutional development and alignment with European standards in the field of personal data protection.

       The NCPDP reaffirms its commitment to continuing cooperation with European and international partners to strengthen an effective oversight system and ensure respect for individuals’ fundamental rights in the context of personal data processing.

       The workshop was organized and funded by the European Commission’s Technical Assistance and Information Exchange Instrument (TAIEX).

       Today, May 15, 2026, in Chișinău, Deputy Prime Minister and Minister of Foreign Affairs of the Republic of Moldova, Mihai Popșoi, presented to the Secretary General of the Council of Europe the instrument of ratification of the Protocol amending the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, signed in Strasbourg on February 9, 2023. It establishes clearer rules on the processing of sensitive data, strengthens data protection standards, regulates cross-border data transfers to other states or international organizations and addresses the challenges posed by technological developments and cybersecurity.

       This action reaffirms the Republic of Moldova’s commitment to continuing the process of harmonizing the national regulatory framework with European standards and to strengthening the protection of citizens’ fundamental rights, including the right to privacy and the protection of personal data.

       The meeting marks the conclusion of the Republic of Moldova’s term as Chair of the Committee of Ministers of the Council of Europe, held from November 14, 2025, to May 15, 2026, under the theme “For a Europe of Peace and Resilience.” This is the second presidency held by the Republic of Moldova since its accession to the Council of Europe, the first having been exercised in 2003.

       The National Center for Personal Data Protection (NCPDP), for information purposes, communicates about the ratification, by Law 36/20.03.2026 and the publication in the Official Gazette of the Republic of Moldova, of the Protocol amending the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

       The purpose of this Protocol is to modernize the international framework in the field of personal data protection, in order to ensure a high level of protection of the fundamental rights and freedoms of natural persons, especially the right to private life, in the context of technological developments and the globalization of data flows.

       The revised document, also known as „Convention 108+”, comes with a number of essential improvements, aimed at strengthening data protection mechanisms and responding to new challenges generated by the use of modern technologies.

       Among the main provisions of the Amending Protocol are:

• Strengthening the protection of personal data;
• Strengthening the rights of data subjects;
• Expanding the category of sensitive data, by including genetic, biometric and ethnic origin data;
• Introducing safeguards for decisions based solely on automated processing;
• Establishing clear obligations for controllers, including rules for international data transfers.

       The new regulations also place increased emphasis on controller’s accountability, processing transparency and the establishment of effective supervisory mechanisms, including by strengthening the role of independent control authorities and intensifying international cooperation.

       The ratification of this Protocol represents an important step for the alignment of the Republic of Moldova with international and European standards in the field of personal data protection. The implementation of its provisions will help to increase citizens’ confidence in the way their data are processed, as well as to facilitate the secure exchange of data at the international level. Law no. 36/20.03.2026 enters into force on August 23, 2026.

       Through this ratification, the Republic of Moldova reaffirms its commitment to ensure a high level of personal data protection and to strengthen international cooperation in this field.

       In this context, the NCPDP encourages public authorities, the private sector and other relevant actors to pay more attention to the new requirements and to take the necessary measures to ensure compliance with the updated standards in the field.

       On April 10, 2026, the National Center for Personal Data Protection (NCPDP) organized a training course in the field of personal data protection for representatives of the National Center for Sustainable Energy (NCSE), at their request.

       The objective of the training was to strengthen the theoretical knowledge and develop the practical skills of the participants regarding the correct application of the national and international normative framework in the field of personal data protection. In this context, the NCPDP trainers presented the main concepts and principles governing data processing, including lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality.

       At the same time, aspects related to the rights of data subjects were addressed, such as right to access, rectification, erase, restriction of processing and object, as well as the mechanisms by which these rights can be exercised in practice. Particular emphasis was placed on the responsibilities of controllers and processors, including the obligation to implement appropriate technical and organizational measures to ensure data security, prevent unauthorized access and manage security incidents.

       The importance of carrying out such training activities is determined by the need to ensure respect for the fundamental right to privacy and personal data protection, especially in the context of the digitization of public services and the increase in the volume of processed data. The training helped to raise awareness among employees of the risks associated with data processing and to develop an organizational culture based on responsibility, integrity and compliance.

       As a result of participating in this course, NCSE representatives have strengthened their skills in the field, being better prepared to correctly apply the legal provisions, adequately manage personal data and ensure respect for the rights of data subjects. The training also contributed to reducing the risks of data security breaches and increasing the level of citizens’ trust in the institution’s activity.

       NCPDP reaffirms its commitment to continue organizing and carrying out training and information activities in the field of personal data protection, in order to support public authorities and institutions in the process of aligning with national and international standards and ensuring a high level of data protection.

       The event took place in a hybrid format, with 60 representatives of the NCSE being trained.