Between 27–29 May 2025, representatives of the National Centre for Personal Data Protection (NCPDP) took part in the 11th edition of the international e-Governance Conference 2025, held in Tallinn, Estonia. Titled “From Bytes to Benefits”, the conference focused on the impact of digital transformation on the economy, along with the financial costs and benefits it entails. This event was a a landmark in the field of digital governance, aimed to provide participants with valuable insights into digital transformation, interoperability, cybersecurity, and the use of artificial intelligence in public administration, while also highlighting best practices and opportunities for international collaboration.

Throughout the working sessions, a series of current topics were addressed, including:

• From bytes to benefits: a strategic approach to digital transformation

• The true cost of digital transformation: investing in long-term value

• Building trust and value through interoperability: the engine of digital efficiency and economic growth

• Shaping prosperity: political leadership and strategic choices for digital economic growth

• Cybersecurity and public-private partnerships: strength in collaboration

• Digital strategies: building a secure and prosperous future

In addition, practical sessions and thematic presentations were held, showcasing best practices from Estonia, Kenya, Ukraine, and Brazil in areas such as cybersecurity, digital education, defence, open data and sustainability, political leadership in digitalization, the role of citizen-centred digital infrastructures, and public-private partnerships in cybersecurity. The agenda also included thematic workshops focusing on interoperability, digital governance, and Digital Public Infrastructure (DPI) frameworks, AI-assisted design of public services, the transition from paper-based to digital services, the role of civil society in cybersecurity resilience, as well as exhibitions and demonstrations of technological solutions applied in public administration and emergency services.

The e-Governance Conference 2025 served as a global meeting point for digital governance leaders and practitioners worldwide, hosting over 600 digital development leaders, policymakers, and donors from more than 80 countries. The event was organized by the e-Governance Academy (eGA), the Ministry of Foreign Affairs of Estonia, and the Estonian Centre for International Development Cooperation, with support from ITL, the European Union, CybExer, Digital Nation, EstoniaHub, FIAP, Recorded Future, the City of Tallinn, Visit Estonia, the World Bank Group and Zetes.

The National Center for Personal Data Protection (NCPDP), in collaboration with the General Inspectorate of the Border Police (GIBP), continues its public awareness campaign on personal data protection. The campaign, carried out under the slogan “Maximum Vigilance When Sharing/Providing Personal Data,” took place at Chișinău International Airport—one of the Republic of Moldova’s most important transit points—with the aim of raising citizens’ awareness about the risks associated with uncontrolled disclosure of personal data.

The awareness activities involved the active participation of the Personal Data Protection Department within the GIBP, as well as the Personal Data Protection Service of the Ministry of Internal Affairs. During the event, data subjects received informative materials and practical advice, being warned that identity documents (such as ID cards, passports), civil status certificates, pensioner ID cards, bank cards, etc., contain a multitude of personal data that require effective protection by their holders. Providing or transmitting copies of these documents, as well as writing personal data in various lists or documents for purposes other than those explicitly provided by law, may lead to illegal use of such data for purposes contrary to those initially intended, to the detriment of the data subjects.

Representatives of the NCPDP emphasized that any request from third parties for access to such data must be treated with utmost caution. It is essential that holders of these data/documents verify the legality of the request and the exact purpose of collecting personal data before providing them.

The campaign “Maximum Vigilance When Sharing/Providing Personal Data” took place in a public, interactive setting, with the participation of Ms. Victoria Muntean, Director of the NCPDP, who, as an active promoter of citizens’ fundamental rights, highlighted the crucial role of continuous education and information of the public in the face of increasingly frequent and sophisticated threats related to identity theft and the abusive use of personal data: “Personal data is not just simple information; it reflects who we are, what we do, and what defines us as individuals. Once publicly exposed or stolen, these data can open the door to abuses, financial fraud, or serious violations of privacy. Through this campaign, we aim to build an informational safeguard as well as a culture of data protection among the population.”

As part of interinstitutional collaboration, the NCPDP and GIBP will continue to organize informational sessions in regional areas. Citizens will be informed about potential cases of non-compliant processing of personal data, and they will receive guidance and practical recommendations on the actions to take in such cases.

Additionally, we specify that the mentioned awareness campaign was simultaneously carried out at the regional departments of the GIBP and state border crossing points.

In this regard, as the national supervisory authority for the processing of personal data, the NCPDP stresses the responsibility of every citizen to ensure the protection of personal data, as the security and confidentiality of these data must remain a priority.

On 19 May 2025, the National Center for Personal Data Protection (NCPDP) organized a training session in the field of personal data protection for staff members of the Information Technology and Cyber Security Service (ITCSS), following a request from the institution.

The purpose of the training was to familiarize ITCSS staff with key aspects of personal data protection in the public service, the regulation of processing procedures, and the confidentiality and security measures for personal data in accordance with current legislation.

The event addressed several important topics, such as:

• Definition of general concepts related to personal data protection;

• The rights of personal data subjects; 

• The processing of special categories of personal data;

• Personal data protection obligations in the performance of official duties;

• Ensuring the security and confidentiality of processed personal data;

• Aspects related to the appointment of the Data Protection Officer (DPO), along with their responsibilities and duties;

• Aspects related to the Data Protection Impact Assessment (DPIA), including the stages involved in conducting one, etc.

The training session was interactive, featuring numerous practical examples to enhance the participants’ understanding of personal data protection principles. Additionally, topics such as access to public interest information, as regulated by data protection legislation, the proper disclosure of such information in accordance with the principle of proportionality in limiting access to public interest information, the retention/storage, and use of personal data after the completion of processing operations were of particular interest to the participants. 

The event was moderated by representatives of the National Center for Personal Data Protection, and around 15 representatives of the Information Technology and Cyber Security Service participated in the training session.

On May 17th, 2025, the National Center for Personal Data Protection (NCPDP) participated in the celebration of Europe Day, which took place in Stefan cel Mare Square in Causeni.

This year’s edition was held under the slogan “Peace, Prosperity, Dignity – Europe is You!”, celebrating the 75th anniversary of the Schuman Declaration (May 9, 1950), which laid the foundation for the European Union, marking the core values that have guided its formation and development.

Participants in the event had the opportunity to engage with representatives of public institutions, diplomatic missions of EU Member States accredited in Chisinau, and to take part in various educational, creative, and interactive activities. They could also enjoy European cuisine and attend informational sessions on current topics. 

EU member states showcased the support they provide to the Republic of Moldova, highlighting the assistance offered while also sharing their cultural and culinary traditions. EU-funded projects, which provide support in various fields, offered visitors information about ongoing activities and who the concrete or potential beneficiaries of this assistance might be.

Representatives of the NCPDP set up a stand with educational-informative materials and promotional items, and the general public was informed about the field of personal data protection. The topics that were of great interest were: the notion of personal data, data subjects’ rights, data security and confidentiality measures, principles of personal data protection, etc. Citizens were informed about possible situations of non-compliant processing of personal data and were given practical guidance and recommendations that should be taken in such cases. At the same time, children were informed about adopting responsible and safe behavior in the digital space in order to surf the internet in a safe and ethical way, reducing their vulnerability to online threats. Children played interactive games, completed a crossword puzzle and took part in a question-answer round, and were rewarded with prizes.

The European Village is traditionally organized by the EU Delegation to the Republic of Moldova, in partnership with public authorities and diplomatic missions accredited in our country, in order to celebrate the annual holiday of peace and unity in Europe – Europe Day. NCPDP participated in the event, joining the initiative of the e-Government Academy.

On 15 May 2025, the National Center for Personal Data Protection (NCPDP) organized a training session in the field of personal data protection for representatives of the Southern Regional Department of the General Inspectorate of the Border Police (GIBP). The event took place at their premises in the city of Cahul. 

            The purpose of the training was to enhance the understanding of personal data protection principles among the Southern Regional Department staff, as well as to ensure the correct application of the legal provisions in this field, in the performance of their duties.

            Key topics discussed during the event included: the definition of general concepts related to personal data protection; the principles and legal grounds for data processing; the rights of personal data subjects; the processing of special categories of personal data; data protection obligations in the performance of official duties; ensuring the security and confidentiality of processed personal data; aspects related to the appointment of the Data Protection Officer (DPO); aspects related to the Data Protection Impact Assessment (DPIA), etc.

            The training proved to be interactive and useful, with participants asking numerous questions based on their work experience, which were answered with documented explanations and practical examples by the trainers. Additionally, topics such as the examination of requests for disclosure of personal data, the correct procedures for accessing personal data through state information system, and the proper audit trail management of such access were of particular interest to the participants.

            Around 60 staff members from the Southern Regional Department of the General Inspectorate of Border Police took part in the training session.

This training session is part of the 2025 training plan of the General Inspectorate of Border Police, approved and signed by the head of both the National Center for Personal Data Protection and the General Inspectorate of Border Police on 28 January of the current year.

On May 16, 2025, the National Center for Personal Data Protection organized a training session in the field of personal data protection for representatives of the structural and specialized units of the General Inspectorate for Migration (GIM), following a request from the institution.

The purpose of the training was to enhance the understanding of personal data protection principles among GIM staff, as well as to familiarize them with confidentiality and security regulations related to personal data, in accordance with current legislation.

Key topics discussed during the session included: the definition of general concepts related to personal data protection; the rights of personal data subjects; the processing of special categories of personal data; the principles and legal grounds for data processing; data protection obligations in the performance of official duties; and measures for ensuring the security and confidentiality of processed personal data.

The training was delivered in an interactive format. Participants posed numerous questions to the trainers, particularly regarding the proper handling of requests containing personal data, the correct procedures for accessing personal data through state information systems, proper audit trail management of such access, and the legality of disclosing information containing personal data received from countries that do not provide an adequate level of data protection.

Seventeen representatives from various structural and specialized units of the General Inspectorate for Migration took part in the session.

The training course is part of the training plan within the GIM for 2025, approved and signed by the heads of the NCPDP and the GIM on January 27th.

The National Center for Personal Data Protection (NCPDP), in collaboration with the General Police Inspectorate (GPI), launched today, May 19, 2025, a large-scale public awareness and information campaign about the field of personal data protection. The campaign, conducted under the slogan “Maximum Vigilance When Sharing Personal Data,” aims to increase citizens’ awareness of the risks associated with the uncontrolled disclosure of personal data.

The awareness initiative involved the active participation of the Personal Data Protection Department within the GPI, as well as the National Public Security Inspectorate. During the campaign, traffic participants were provided with informational materials and practical advice, and were warned about the potential dangers related to sharing personal data contained in various documents, such as identity cards, passports, civil status certificates, pensioner cards, bank cards, and other similar documents containing sensitive information, as well as writing down such data on various lists for alleged purposes.

Representatives of the NCPDP emphasized that any request from third parties for access to such data should be treated with utmost caution. It is essential for the holders/owners of such data/acts to verify the legality of the request and the specific purpose of collecting the personal data before providing it.

The “Maximum Vigilance When Sharing Personal Data” campaign comes in the context of increasingly frequent fraud attempts, both nationally and internationally, involving the illegal collection of personal data. From phone scams and fake emails to fraudulent websites and requests disguised under various pretexts, the dangers citizens are exposed to are growing exponentially.

Another important objective of the campaign is to strengthen inter-institutional cooperation to prevent and combat violations of personal data protection laws. As part of joint actions, the NCPDP and the GPI will continue to organize information sessions in various regions. Citizens will be informed about potential cases of improper personal data processing and will receive guidance and practical recommendations on the actions they should take in such situations.

In this regard, the NCPDP, as the national authority responsible for surveillance the processing of personal data, emphasizes each citizen’s responsibility in ensuring the protection of personal data. The security and confidentiality of this data must be a priority.

In the period 14-16 May 2024, representatives of the National Centre for Personal Data Protection (NCPDP) participated in the 32nd Spring Conference of the European Data Protection Authorities in Batumi, Georgia.

This year Spring Conference was hosted by Personal Data Protection Service of Georgia and brought together Data Protection Authorities from across Europe to address issues of common interest, emerging trends and innovative developments in the field of privacy and personal data protection. At the same time, a key objective of the conference was to promote cooperation by encouraging collaboration between the different data protection bodies in Europe and the professionals working within them. In addition, the conference served as a unique European platform for the exchange of experience and good practices in the field of personal data protection.

This years’ conference tagline was: “ A person’s most valuable treasure is their identity.” These words belong to Ilia Chavchavadze, a Georgian publisher, writer, and poet who revitalized the sense of national identity in Georgia during the second half of the 19th century. 

During the working sessions, current topics in the field of data protection were presented, such as:

• the regulation of artificial intelligence and data protection legal frameworks at national, European, and global levels;

• the protection of children’s privacy and personal data;

• the impact of modern technological developments and artificial intelligence on the right to privacy;

• current challenges in protecting personal data related to an individual’s health;

• the role of data protection officers (DPOs) and privacy professionals, etc.

At the end of each conference day, two parallel side events were held: “Data Protection in Georgia — Challenges and Opportunities” and “Fundamental Rights Impact Assessment in Artificial Intelligence: From Legal Requirements to Implementation. The Catalan FRIA Model.”

The Spring Conference has been held since 1991 and plays a key role in facilitating discussions on emerging trends in privacy and data protection. The event promotes a constructive dialogue between European data protection authorities and practitioners in the field, creating a strong platform for addressing both challenges and opportunities in data protecion space. The conference is known as a major event for reviewing European standards in personal data protection and for sharing best practices across Europe.

In addition to the official conference sessions, the Personal Data Protection Service organized supplementary events and social activities for the guests, offering participants an opportunity to experience Georgia’s unique culture, history, and natural beauty.

On May 9, 2025, the National Center for Personal Data Protection (NCPDP) joined the initiative of the e-Government Academy to participate in the inauguration event of the European Town, organized annually on the occasion of Europe Day.

This year’s edition was held under the slogan “Peace, prosperity, dignity – Europe is you!“, the event taking place in the Great National Assembly Square in Chisinau.

Europe Day 2025 is about reaffirming our commitment to the values ​​that unite us and make us strong: Peace, Prosperity and Dignity. 19 member states of the European Union shared their cultural and culinary traditions.

56 projects funded by the European Union, which provide assistance in various fields, such as rural, economic, social development, provided visitors with information about the activities carried out and who are or can become concrete beneficiaries of this assistance. The participants of the event had the opportunity to interact with representatives of public institutions, diplomatic missions of EU member states accredited in Chisinau, to participate in various educational, creative and interactive activities, to taste European cuisine and to participate in informative sessions on current topics.

Representatives of the NCPDP set up a stand with educational and informative materials and promotional articles, and the general public was informed about the field of personal data protection. Among the topics addressed that showed increased interest, we can list: the notion of personal data, the rights of data subjects, data security and confidentiality measures, the principles of personal data protection, etc. Citizens were informed about possible situations of non-compliant processing of personal data, being offered practical guidelines and recommendations that should be undertaken in such cases. At the same time, children were informed about adopting responsible and safe behavior in the digital space in order to browse the internet safely and ethically, reducing their vulnerability to online threats. Children played interactive games, completed a crossword puzzle and participated in the question-answer round, being awarded with appropriate gifts.

The European Town is traditionally organized by the EU Delegation to the Republic of Moldova, in partnership with public authorities and diplomatic missions accredited in our country, in order to celebrate the annual celebration of peace and unity in Europe – Europe Day.

On April 07th, 2025, the National Center for Personal Data Protection organized a training course in the field of personal data protection for the representatives of the Agency for Geodesy, Cartography and Cadastre (AGCC)), at their request.

The aim of the training course was to increase the awareness of the employees of AGCC, Cadastre of Immovable Property and INGEOCAD state enterprise on the principles of personal data protection, as well as to familiarize them with the confidentiality and security regime of personal data in accordance with the provisions of the legislation in force.

During the event important topics were discussed, such as:

• The definition of general notions related to the field of personal data protection;

• The rights of personal data subjects;

• The processing of special categories of personal data;

• The principles and legal grounds for personal data processing;

• Aspects related to the appointment of the Data Protection Officer (DPO);

• Aspects related to the Data Protection Impact Assessment (DPIA);

• Ensuring security and confidentiality of personal data by GCCA employees, etc.

The training course was an interactive one, with participants asking multiple questions on aspects related to access to information of public interest in the light of personal data protection legislation, aspects related to the correct procedure for accessing personal data through the State Information Systems, the correct auditing of these accesses, the correct depersonalization of information containing personal data, as well as the examination of personal data disclosure requests received from state institutions.

During the event 25 representatives of the Agency for Geodesy, Cartography and Cadastre, Cadastre of Immovable Property and INGEOCAD state enterprise were trained.