On August 25, 2026, the National Center for Personal Data Protection (NCPDP) continued organising training courses in the field of personal data protection for representatives of the National Office of Social Insurance (CNAS). The activity is part of the Training Plan for 2026, approved by the heads of the two institutions on July 8, 2026 and aims to strengthen the knowledge and skills of CNAS employees in the correct application of the new legal provisions in the field of personal data protection.

       The training covered the fundamental principles and rules relating to the processing of personal data, the responsibilities of controllers, the conditions for lawful processing, respect for the rights of data subjects, as well as the measures necessary to ensure the confidentiality and security of personal data.

       Particular attention was given to the specific nature of CNAS’s activities, as the institution processes a significant volume of personal data in the exercise of its responsibilities related to the provision and administration of social insurance benefits and services. In this context, the discussions focused on practical situations concerning the collection, use, storage and disclosure of personal data, access to information, as well as the need to implement appropriate measures to prevent unauthorised access, disclosure or improper use of personal data.

       Participants also had the opportunity to clarify practical aspects concerning the exercise of data subjects’ rights, the management of security incidents and employees’ responsibilities in the processing of personal data.

       The training is particularly relevant in the context of the entry into force, on August 23, 2026, of Law No. 195/2024 on personal data protection, which establishes a modern legal framework based on accountability, transparency and the effective protection of individuals’ rights and freedoms.

       Through the organisation of these activities, the NCPDP aims to support public institutions in understanding and correctly applying the new legal provisions, so that personal data protection is integrated into institutional processes and employees’ day-to-day activities.

       The training sessions conducted in partnership with CNAS also highlight the importance of strengthening interinstitutional cooperation and developing an organisational culture focused on personal data protection and respect for individuals’ rights.

       The event was held online and was attended by approximately 50 representatives of the National Office of Social Insurance.

       23 August 2026 represents a benchmark date for personal data protection in the Republic of Moldova. As of this date, two important pieces of legislation enter into force – Law No. 195/2024 on personal data protection and Law No. 160/2026 on the protection of personal data processed for the purposes of preventing and combating crime.

       The entry into force of the two laws marks an important stage in the modernisation and strengthening of the national personal data protection framework, in line with European standards and the Republic of Moldova’s objectives of European Union integration.

       Law No. 195/2024 on personal data protection establishes a modern legal framework that strengthens the rights of data subjects and the responsibilities of those who process personal data. It places greater emphasis on the lawfulness, fairness and transparency of processing, as well as on accountability and data security.

       The importance of the new law is reflected, first and foremost, in the safeguards it provides to individuals with regard to the protection of their private life, dignity and fundamental rights, in a context where personal data are increasingly used in the activities of institutions and organisations, as well as in the digital environment.

       At the same time, Law No. 160/2026 on the protection of personal data processed for the purposes of preventing and combating crime establishes specific rules and safeguards for the processing of personal data by competent authorities for the purposes of preventing and combating crime. The legislation seeks to ensure a balance between the need to prevent and combat crime and the respect for individuals’ fundamental rights, including the right to personal data protection.

       Another important benchmark in this process is the ratification of the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data – Convention 108+. On 15 May 2026, the Republic of Moldova deposited its instrument of ratification, further strengthening its commitment to European and international standards in the field of personal data protection.

       “The new rules are, first and foremost, about people and their rights. A modern legal framework means more than rules and procedures. It means real safeguards for every individual, greater responsibility in the way their data are used and greater trust in the institutions that process it. The new provisions require efforts to adapt and ensure compliance, but their ultimate purpose is essential: to protect the private life, dignity and fundamental rights of every individual,” stated Victoria MUNTEAN, Director of the NCPDP.

       August 23, 2026 therefore marks the beginning of a new stage for personal data protection in the Republic of Moldova – a stage based on clearer rules, greater accountability and strengthened safeguards for data subjects.

       The NCPDP will continue to inform, provide guidance and support to authorities, organisations and citizens in understanding and applying the new legal framework, thereby contributing to the development of an institutional and social culture based on respect for the right to personal data protection.

      Today, 4 September 2026, the National Center for Personal Data Protection (NCPDP) organised a training session in the field of personal data protection for representatives of the National Office of Social Insurance (CNAS).

      The training aimed to develop employees’ knowledge and skills regarding the proper application of the legal principles and provisions on personal data protection within their professional activities.

      The training covered topics such as:

• general concepts relating to personal data;
• legal bases for the processing of personal data;
• categories of personal data;
• principles relating to the processing of personal data;
• rights of data subjects;
• Data Protection Impact Assessment (DPIA), etc.

       At the end of the session, participants raised questions concerning the applicability of the new legal framework on personal data protection – Law No. 195/2024, which entered into force on 23 August 2026.

       Training sessions of this kind make an essential contribution to strengthening institutional capacities in the field of personal data protection, as well as to promoting a consistent approach to the processing of personal data.

       The event was held online and was attended by approximately 70 representatives of CNAS.

       On 9 September 2026, the National Center for Personal Data Protection (NCPDP) organised a training course for representatives of the Higher School of Tourism and Hotel Services of the Academy of Economic Studies of Moldova (ASEM), jointly with the Information and Promotion Centre for Tourism in the Republic of Moldova.

       The training aimed to inform, familiarise and raise awareness among economic agents in the tourism industry and HoReCa sectors of the new legal provisions in the field of personal data protection.

       The training session covered essential topics, including general concepts relating to personal data, legal bases for the processing of personal data in the context of tourism activities, categories of personal data, principles relating to the processing of personal data, the rights of data subjects, and Data Protection Impact Assessment (DPIA). Details were also discussed regarding the processing of personal data in the course of registering and verifying tourists as consumers, as well as types of documents and contracts specific to tourism and HoReCa activities.

       Particular emphasis was placed on identifying and preventing risks associated with unauthorised access to information containing personal data, unauthorised disclosure and improper use of such data. Practical examples and recommendations were presented to contribute to strengthening the level of compliance and accountability in the professional activities of economic agents in the tourism industry.

       The event was held at the ASEM premises and was attended by 84 representatives.

       On 8 September 2026, the National Center for Personal Data Protection (NCPDP) organised a training session for special status public servants of the “Ștefan cel Mare” Academy of the Ministry of Internal Affairs (MIA), on the topic “Personal Data Protection Regulations Following the Entry into Force of Law No. 195/2024”.

       The training aimed to strengthen the capacities of special status public servants of the “Ștefan cel Mare” Academy of the MIA by familiarising them with, raising awareness of and providing information on the new regulations in the field of personal data protection.

       The training covered the main provisions concerning the principles applicable to the personal data processing, legal bases for processing, the rights of data subjects and the obligations of controllers, as well as records of processing activities. Other topics included informing data subjects, the processing of special categories of personal data, the disclosure of information containing personal data to third parties, storage periods, as well as the technical and organisational measures necessary to ensure the security of personal data.

       Through interactive discussions and practical examples, participants gained a better understanding of how the legal provisions apply to specific workplace situations. The training also emphasised that personal data protection is the responsibility of every employee who has access to such information within their professional duties.

       Approximately 80 special status public servants participated in the training.

       On 10 September 2026, the National Center for Personal Data Protection (NCPDP) organized a training course for representatives of the National Authority for the Settlement of Claims (NASC).

       The aim of the training was to strengthen the knowledge and professional skills of NASC staff for the correct and uniform application of the provisions of Law No. 195/2024 on personal data protection, the proper identification and management of risks associated with the processing of personal data, as well as the strengthening of internal compliance mechanisms in the field of personal data protection.

       The main topics addressed during the training included the fundamental principles relating to the processing of personal data, the conditions for lawful processing, the rights of data subjects, the obligations of controllers, technical and organisational measures to ensure data security, as well as procedures for the notification and management of security incidents. Practical aspects directly relevant to NASC’s activities were also examined.

       The training session also included discussions on specific aspects related to the examination and settlement of complaints, the management of documents and evidence submitted by the parties, the organisation and conduct of public hearings, including their audio and video recording, the communication of procedural acts, as well as the issuance and publication of NASC decisions, rulings and other acts on its official website.

       The training was held at the NASC premises and was attended by 28 employees.

       On March 27, the National Center for the Personal Data Protection (NCPDP) continued the information and awareness campaign for the school community, organizing the training course on „Personal data protection and child safety in the online environment” for the students of the Public Institution Theoretical High School „Nicolae Iorga” from Chisinau.

        The activity took place during the Personal Development class, with the target audience being the students of the 4th grade „A” and was conducted by NCPDP representatives in an interactive format, adapted to the children’s age level. The approach facilitated active student engagement, open dialogue and practical understanding of the information presented.

       The purpose of the training was to strengthen the level of information and awareness regarding the importance of personal data protection, as well as to train skills for responsible and safe use of the online environment. In this context, students were encouraged to understand the role of privacy protection and the impact that uncontrolled sharing of information containing personal data can have.

       During the training, students were introduced to the basic notions of personal data, learning to identify them in their daily activities and to realize the need to protect them. At the same time, issues related to the responsible use of photos and videos online, the importance of privacy settings and the basic rules regarding the distribution of information on social networks and communication applications were addressed.

       An important segment of the training was dedicated to identifying online risks, including interaction with strangers, excessive exposure of personal data, unsolicited messages or other situations that may affect children’s safety. Students were guided to adopt preventive behaviors, such as using secure passwords, protecting personal accounts and requesting adult support in situations of uncertainty or risk.

       By participating in this training course, students have developed essential self-protection skills in the digital environment, understood the importance of responsible communication and were encouraged to show respect for their own privacy as well as those around them.

       Through such initiatives, NCPDP aims to strengthen a culture of personal data protection among the younger generation, contributing to the training of informed and responsible users. Early childhood education in this area is an essential factor in preventing security incidents and protecting the fundamental rights of children. At the same time, NCPDP will continue organizing information and training activities dedicated to children and young people, being part of institutional efforts to promote good practices in the field of personal data protection throughout society.

       The event was organized at the initiative of NCPDP, with 37 students being trained. At the same time, the informative materials, as well as the gifts offered to the students, were developed with the support of the United Nations Children’s Fund (UNICEF).

       On March 27, 2026, the National Center for the Personal Data Protection (NCPDP) conducted a training course for employees of the Ștefan Vodă Police Inspectorate (PI). The activity was carried out in accordance with the Training Plan within the subdivisions of the General Police Inspectorate (GPI) for the year 2026, a plan approved and signed by the heads of the NCPDP and the GPI on January 28.

       The purpose of the training course was to develop the professional skills of police employees in the correct, legal and responsible personal data processing, in accordance with national legislation and applicable standards. At the same time, the activity aimed at strengthening a unitary practice in the personal data management within the operative and administrative activities carried out by the police bodies.

       During the training course, essential aspects regarding the applicable regulatory framework, the basic principles of personal data processing, the rights of data subjects, as well as the obligations of controllers were addressed. The particularities of data processing in the field of law enforcement were also presented, including legal limits, conditions of legality and institutional responsibilities in the context of specific police activities.

       Special emphasis was placed on the identification of risks and non-conformities in the data processing process, practical situations and relevant examples from the current activity being analyzed. Participants were informed about the technical and organizational measures necessary to ensure data security, prevent security incidents and properly manage them.

       The importance of such training courses resides in the essential role that police bodies play in processing a significant volume of personal data, including sensitive data. In this context, respect for data protection principles contributes not only to protecting the fundamental rights and freedoms of individuals, but also to strengthening public credibility in the work of law enforcement institutions.

       By organizing these trainings, NCPDP reaffirms its commitment to support public authorities in the correct application of legislation in the field of personal data protection and in promoting an institutional culture based on responsibility, legality and transparency.

       During the event, 40 representatives of the Ștefan Vodă Police Inspectorate were trained.

       From 18–19 March 2026, representatives of the National Centre for the Personal Data Protection (NCPDP) attended the 65th meeting of the Bureau of the Consultative Committee of the Convention for the protection of individuals with regard to automatic processing of personal data (Convention 108) – TPD-BUR, held in Paris, France.

       The objective of the meeting was to get involved in the strategic discussions regarding the development of the international framework for personal data protection, as well as to contribute to the implementation of the activities provided for in the Work Program 2026–2029.

       During the meeting, topics of major importance were addressed, including:

• the state of play of implementation of Convention 108+ and the evolution of the ratification process of the Amending Protocol (CETS No 223);
• transborder data flows of personal data and promotion of model contractual clauses (MCCs);
• data protection in the context of large language models (LLMs);
• development of guidelines on data protection in the field of neuroscience;
• cooperation with other structures of the Council of Europe, including in the context of the establishment of the Steering Committee for New and Emerging Digital Technologies (CDNET);
• relevant international developments and initiatives in the field of data protection.

       During the event, the delegation of the Republic of Moldova informed the participants about the progress made in the national ratification process, mentioning the approval of the draft law by the Government on March 4, 2026 and its transmission to the Parliament for examination and adoption.

       At the same time, recent events in the field were highlighted, such as the organization, on January 28, 2026, of the National Conference „Implementation of the legal framework regarding data protection: challenges, benefits, resilience”, held in Chisinau, including in the context of the Presidency of the Republic of Moldova at the Committee of Ministers of the Council of Europe.

       Participation in this meeting was an important opportunity to get involved in decision-making processes at the international level, to exchange best practices and to strengthen cooperation in the field of personal data protection.

       NCPDP reaffirms the importance of the active participation of the Republic of Moldova within the mechanisms of the Council of Europe and the commitment to contribute to the development of a modern normative framework, adapted to technological developments and oriented towards protecting the fundamental rights of individuals.

       The National Center for Personal Data Protection (NCPDP), for informational purposes, announces about the launch of the video from the national conference “Implementation of the Legal Framework on Data Protection: Challenges, Benefits, Resilience.”

     The importance of the launched video is undeniable, as it offers a retrospective of the conference’s key moments, including the conclusions of international participants, representatives of public authorities and the private sector. The video aims to raise awareness among data subjects, data protection officers (DPO), public institutions and the business community regarding the new legislative provisions in the field of personal data protection, while also highlighting the challenges, benefits and importance of resilience in implementing the legal framework.

       The video was produced with the support of the project “Improving Cyber Resilience in the Eastern Partnership Countries,” implemented by the e-Governance Academy (eGA) and funded by the European Union, as well as with the support of the European Union Partnership Mission in the Republic of Moldova (EUPM Moldova) and can be viewed by clicking on the link: https://datepersonale.md/videogalerie/