The National Center for the Protection of Personal Data (NCPDP), for informational purposes, announces about the development of Guidelines/explanations for the proper implementation of Law No. 195/2024 on personal data protection, a legislative act that will enter into force on August 23, 2026.

       The purpose of these Guidelines is to assist data controllers, processors and other stakeholders in understanding, interpreting, and correctly applying the new legal provisions, in a context marked by rapid technological developments and the intensification of personal data flows. The document provides explanations and reasoning intended to clarify the new requirements introduced by the law, promoting a modern approach based on risk assessment and management and on the proactive responsibility of data controllers.

       The guidelines were developed based on the principles established by Regulation (EU) 2016/679 and are aimed at ensuring a high level of protection for the fundamental rights and freedoms of natural persons, strengthening legal security and creating a clear and coherent framework to support consistent practices in the field of personal data protection.

       At the same time, the NCPDP notes that the document is intended as a guide and serves as a reference tool for the correct and uniform application of the provisions of Law No. 195/2024 on personal data protection and recommends to be consulted regularly.

       The full text of the Guidelines/explanations for the correct application of Law No. 195/2024 can be accessed via the following link:

CONSIDERENTE_Legea_195/2024   

       On February 20, 2026, the National Center for the Protection of Personal Data (NCPDP) organized and conducted a training session for employees of the Southern Investigations Department within the National Investigations Inspectorate. The training session was conducted in accordance with the Training Plan for the subdivisions of the General Police Inspectorate (GPI) for 2026, a document approved and signed on January 28, 2026, by the heads of the NCPDP and the GPI, with a view to strengthening institutional capacities regarding the uniform and correct application of the regulatory framework on data protection.

       The purpose of the training was to increase the level of awareness and accountability among staff with investigative duties, by deepening their knowledge of the fundamental principles of personal data processing, the legal grounds for processing, the conditions of legality and proportionality of intrusions within private life, as well as the obligations of controllers and processors.

       The session addressed key issues regarding:

•  the application of the principles of lawfulness, fairness and transparency in the processing of personal data, while also respecting the principles of data minimization and purpose limitation;
• ensuring data integrity and confidentiality through the implementation of appropriate technical and organizational measures;
• the specificities of data processing in the context of special investigative activities;
• handling requests from data subjects regarding the exercise of their rights guaranteed by applicable law;
• legal liability for violations of the personal data protection regime.

       In addition, representatives from the NCPDP provided explanations and practical recommendations regarding the documentation of data processing operations, the delimitation of functional responsibilities within operational units and the assessment of risks associated with data processing in investigative activities.

       The event took place in an interactive format, analyzing case studies relevant to the activity of the Southern Investigations Department, with a focus on identifying solutions compliant with the regulatory framework and relevant case law.

       By organizing these training activities, the CNPDCP reaffirms its commitment to strengthening the culture of data protection within public authorities, including law enforcement bodies, with a view to ensuring a fair balance between the need to fulfill legal obligations and respect for the fundamental rights and freedoms of individuals. At the same time, the NCPDP will continue to implement the Training Plan for 2026, in cooperation with the GPI, to ensure the consistent and effective application of personal data protection legislation.

       During the event, 17 representatives of the Southern Investigations Department of the National Investigations Inspectorate were trained.

       On February 19, 2026, the National Center for Personal Data Protection (NCPDP) organized a training course in the field of personal data protection for the representatives of the Information Technology Service (ITS) of the Ministry of Internal Affairs (MIA), at their request.

       The main objective of the course was to strengthen and enhance the theoretical and practical knowledge of the participants regarding the proper application of personal data protection regulations, with a focus on their responsibilities under the relevant legislation. The training was designed to assist ITS representatives in identifying and managing risks associated with data processing carried out through the information systems used within the Ministry of Internal Affairs.

       The training session covered, in detail, topics relevant to ITS’ specific activities, such as:

•  the fundamental principles of personal data processing;
•  the roles and responsibilities of controllers and processors from the perspective of the infrastructure managed by ITS;
• data processing security requirements and appropriate technical and organizational measures;
• security incident management and notification obligations;
• the impact of new legal provisions on existing and future information systems.

       Following the course, the need for effective collaboration between staff responsible for the administration and development of information systems and those responsible for ensuring legal compliance was highlighted, the importance of conducting ongoing risk assessments associated with data processing operations, as well as the essential role of continuous staff training in maintaining a high level of personal data protection.

       The NCPDP reaffirms its commitment to supporting public authorities in the process of adapting to new legislative requirements and to promoting a culture of data protection based on accountability, legality and security.

       During the event, 25 representatives of the Information Technology Service of MIA were trained.

       On February 24, 2026, the National Center for Personal Data Protection (NCPDP) organized a training course in the field of personal data protection for Customs Service employees, at their request.

       The training aimed to strengthen participants’ theoretical and practical knowledge regarding the proper application of the national regulatory framework in the field of personal data protection, as well as to clarify the obligations of public authorities in their role as data controllers. At the same time, the training aimed to increase the level of compliance of data processing operations carried out within the scope of customs-related activities.

       During the training session, the provisions of the national legal framework applicable to personal data protection were presented and analyzed in detail, with an emphasis on the fundamental principles of processing, the conditions of lawfulness, proportionality and transparency, as well as the obligations of data controllers and data processors. At the same time, the essential role of respecting the rights of data subjects in the context of operational activities carried out by customs officials was highlighted.

       Furthermore, the training aimed to clarify aspects related to ensuring the security of personal data, addressing the technical and organizational measures necessary to prevent unauthorized access, loss, destruction, or unlawful disclosure of data. Participants were informed about the individual responsibilities of staff involved in processing activities, as well as the importance of documenting and implementing internal procedures in accordance with legal requirements.

       A separate section of the activity focused on examining practical situations and case studies relevant to the work of the Customs Service, with the aim of identifying specific risks associated with the processing of personal data and implementing appropriate solutions to mitigate them. In this context, recommendations were formulated to ensure consistent and compliant practices within the institution.

       The NCPDP emphasizes the importance of institutional cooperation and the continuous training of public authority staff in the field of personal data protection as an indispensable element for strengthening legal certainty, increasing the level of legislative compliance and ensuring respect for the fundamental rights and freedoms of data subjects. At the same time, the NCPDP reaffirms its willingness to provide methodological and advisory support to public authorities, with a view to promoting an institutional culture based on legality, accountability and the effective protection of personal data.

      During the event, 132 customs officials were trained.

       On February 23, 2026, the National Center for Personal Data Protection (NCPDP) organized and conducted a training session for employees of the Customs Service, following a request submitted by them.

       The training course aimed to strengthen the institutional capacities of Customs Service representatives in the field of personal data protection by deepening their theoretical and practical knowledge of the relevant national regulatory framework, the principles of personal data processing, safeguards for the rights of data subjects, as well as the responsibilities of data controllers and data processors.

       The session addressed key issues concerning the legality and grounds for processing personal data in the exercise of the Customs Service’s functional duties, the application of the principles of proportionality and data minimization, ensuring the confidentiality and security of processed information, the management of security incidents, as well as mechanisms for cooperation with the supervisory authority.

       In addition, case studies relevant to the specific nature of customs activities were analyzed, including situations involving the exchange of data with other national and international public authorities, the use of automated information systems, as well as data processing in the context of customs control and fraud prevention. The focus was on identifying the risks associated with the processing of personal data and on implementing appropriate technical and organizational measures to prevent violations of relevant legislation.

       In the context of the Customs Service’s operational responsibilities, which involve the processing of a considerable volume of personal data, including sensitive data, the training emphasized the importance of integrating the principle of accountability into all operational processes, as well as the need for proper documentation of processing operations.

       Among the learnings from the course are:

•  the need for a prior assessment of risks to the fundamental rights and freedoms of individuals when implementing new procedures or information systems;
• strengthening the organizational culture regarding data protection;
• the designation and active involvement of the data protection officer in decision-making processes;
• ensuring ongoing training for staff responsible for data processing.

       The training highlighted the essential role of continuing professional development in preventing security incidents and ensuring compliance with applicable legal regulations. At the same time, it contributed to the standardization of internal practices and the consolidation of an operational framework compatible with national and international standards in the field of data protection.

       The NCPDP reiterates its willingness to provide methodological and advisory support to public authorities for the correct and uniform implementation of personal data protection legislation, emphasizing that the effective protection of the right to privacy is a fundamental condition for the lawful and transparent exercise of official duties.

       During the event, 145 customs officials were trained.

       On March 5, 2026, the National Center for Personal Data Protection (NCPDP) held a training course for employees of the Ialoveni Police Inspectorate (IP), an activity organized in accordance with the Training Plan within the subdivisions of the General Inspectorate of Police (GIP) for 2026. The respective Plan was approved and signed by the heads of the two institutions on January 28, 2026, with the objective of strengthening the level of knowledge and application of the regulatory framework in the field of personal data protection in the activity of police bodies.

       The purpose of the training was to strengthen the professional capacities of IP Ialoveni employees regarding the legal, responsible and secure processing of personal data, in the context of exercising their job duties, as well as in preventing possible violations of the legislation in the field.

       The training session addressed theoretical and practical aspects regarding:

• the fundamental principles of personal data processing;
• the legal grounds for data processing in the activity of law enforcement bodies;
•  the responsibilities of controllers and processors in the data processing procedure;
• the technical and organizational measures necessary to ensure data security;
• best practices and case studies on managing situations involving personal data in police activity.

       At the same time, participants had the opportunity to analyze concrete examples and practical situations encountered in the current activity of police bodies, highlighting the legal and institutional risks that may arise in the event of non-compliance with legal requirements regarding data protection.

       The lessons learned during the training focused, in particular, on the need to integrate data protection principles from the very beginning of operational processes, the proper application of rules regarding data access, storage and transmission, as well as strengthening each employee’s individual responsibility in managing information containing personal data.

       Conducting these training sessions helps to improve institutional compliance and strengthen an organizational culture based on respect for the right to privacy and data protection—aspects that are essential to the work of law enforcement bodies.

       By organizing these activities, the NCPDP reaffirms its commitment to supporting public authorities in the proper implementation of the legal framework for the protection of personal data by providing methodological support, training and the exchange of best practices.

       During the event, 63 representatives of the Ialoveni Police Inspectorate of GIP were trained.

       On February 27, the National Center for Personal Data Protection (NCPDP) conducted a training course for employees of the Călărași Police Inspectorate (IP). The activity was carried out in accordance with the Training Plan for the subdivisions of the General Police Inspectorate (GIP) for 2026, a plan approved and signed by the heads of the NCPDP and the GIP on January 28 of this year.

       The main objective of the training was to strengthen participants’ knowledge and understanding of the national regulatory framework for personal data protection, as well as to develop the practical skills of IP Călărași employees to ensure the correct and consistent application of legal provisions in data processing while performing their duties. At the same time, the training aimed to prevent risks of violating personal data protection legislation and to increase institutional accountability regarding the fundamental rights and freedoms of data subjects.

       The session covered the following topics:

• the fundamental principles of personal data processing (lawfulness, fairness, transparency, proportionality, and data minimization);
• the legal grounds applicable to police activity;
• the rights of data subjects and the means of ensuring their effective exercise;
• the obligations of data controllers and processors;
• the technical and organizational measures necessary to ensure data security;
• procedures for reporting and managing security incidents.

       As a result of the training, the following key takeaways were identified: the need for clear documentation of data processing operations; the importance of conducting a prior risk assessment for the processing of sensitive data; strict adherence to the principle of proportionality in the collection and use of data and the establishment of effective internal mechanisms for compliance monitoring and control.

       By organizing these activities, the NCPDP reaffirms its commitment to promoting an institutional culture based on legality, accountability and compliance with national and international data protection standards, as well as to strengthening inter-institutional cooperation in order to ensure an adequate level of data protection.

       During the event, 55 representatives of the Călărași Police Inspectorate were trained.

       On February 26, 2026, the National Center for Personal Data Protection (NCPDP) organized a training session on personal data protection for representatives of the Public Institution for the Real Estate Cadastre (IP CBI), following a request submitted by them.

       The main purpose of the training was to strengthen participants’ theoretical and practical knowledge regarding the correct and uniform application of national legislation on personal data protection, particularly in the specific context of the activities carried out by the IP CBI, which involve the processing of a significant volume of personal data, including highly sensitive data.

       During the training, key topics were covered, including:

• the fundamental principles of personal data processing;
• the legal grounds for data processing in the activity of the IP CBI;
• the obligations of data controllers, including those related to ensuring data security and confidentiality;
•  the rights of data subjects and institutional measures to ensure their compliance;
• legal liability for violations of personal data protection regulations.

       Particular emphasis was placed on analyzing practical examples and specific situations encountered in the institution’s day-to-day operations, such as access to cadastral data, disclosure of information to third parties, setting retention periods and implementing appropriate technical and organizational measures. Participants asked numerous questions, to which they received well-reasoned answers based on the applicable legal framework, clarifying practical situations that could lead to compliance risks.

       The importance of this training lies in ensuring a high level of protection for the fundamental rights and freedoms of individuals, particularly the right to privacy, as well as in strengthening an institutional culture of data protection within the IP CBI. At the same time, the training contributed to preventing security incidents, reducing the risk of legal violations and establishing a unified and consistent practice in this area.

       As a result of participating in the course, IP CBI representatives gained a thorough understanding of their obligations as a personal data controller, as well as enhanced skills in identifying and properly managing situations involving data processing, in accordance with applicable legal requirements.

       The NCPDP reaffirms its willingness to support public authorities and data controllers in the process of properly implementing personal data protection legislation through training, guidance and specialized methodological assistance.

       During the event, 70 representatives from the territorial subdivisions and central staff of the IP CBI, as well as from the Agency for Geodesy, Cartography, and Cadastre, were trained.

       Every year, on January 28, the European community celebrates “European Data Protection Day”, a landmark event, supported by the European Commission, which promotes the right to privacy and the protection of personal data. This day represents a moment of reflection on the importance of protecting information containing personal data in the digital age and provides an opportunity to strengthen awareness at the societal level regarding the fundamental rights of citizens.

       European Data Protection Day is important not only for the member states of the Council of Europe, but also for the entire global community involved in the field of data protection. In a time when personal information is processed and stored on a large scale, compliance with the principles of confidentiality and security becomes essential for protecting privacy and preventing data misuse.

       On this occasion, the National Center for Personal Data Protection (NCPDP) annually organizes a series of activities aimed at raising citizens’ awareness, promoting good practices in data protection and providing practical guidance to prevent situations of non-compliant processing of personal data.

       These activities also include street actions, through which NCPDP brings information directly to the community and interacts with the general public.

       In this context, on January 26, NCPDP employees carried out a street action in front of the Arc de Triomphe in Chisinau, distributing information materials to passersby and explaining the importance of personal data protection. Citizens were informed about the notion of personal data, the rights of data subjects, the security and confidentiality measures that must be respected, as well as the fundamental principles of data protection. In addition, citizens received practical recommendations on actions to be taken in the event of non-compliant processing of their personal data

       Such initiatives play a key role in educating the public, motivating citizens to be more attentive to how their data is collected and used. NCPDP aims to continue organizing information and awareness-raising actions this year, contributing to building a solid culture of personal data protection in the Republic of Moldova and creating a safe and informed environment, in which data protection is a priority for the entire community.

       Annually, on January 28, the european community celebrates European Data Protection Day, an important milestone for promoting the fundamental right to privacy and the protection of personal data. The year 2026 marks the 20th edition of this day and 45 years since the adoption of Convention No. 108 for the Protection of Individuals with regard to Automatic Processing of Personal Data, signed in Strasbourg on January 28, 1981.

       The purpose of Convention No. 108 is to guarantee, in the territory of each State Party, to every natural person, regardless of nationality or residence, respect for fundamental rights and freedoms, in particular the right to privacy with regard to the processing of personal data.Through its modernization, Convention 108+ remains an essential legal instrument, adapted to the challenges generated by technological developments and digital transformation.

       European Data Protection Day is a very special day not only for the member states of the Council of Europe, but also for the entire global data protection community and, above all, for every individual whose rights are protected by this fundamental regulatory framework.

       In this context, the member states of the Council of Europe, as well as other partner states and institutions, annually organize public activities and events dedicated to raising society’s awareness of the importance of the field of personal data protection. The National Center for Personal Data Protection (NCPDP) marks this day alongside european institutions by promoting accountability and best practices in prevention, intervention and support.

       In recent years, the Republic of Moldova has made significant progress towards achieving the national objective of ensuring an adequate level of data protection, in accordance with European Union and Council of Europe standards. These efforts directly aim to guarantee the fundamental rights and freedoms of individuals, in particular the right to privacy in the context of the processing of personal data.

       A key moment in this journey is the publication, on August 23, 2024, in the Official Gazette of the Republic of Moldova, of Law No. 195/2024 on the protection of personal data, a normative act that transposes the provisions of Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR). Law No. 195/2024 is set to enter into force in August 2026, marking the transition to a modern, coherent and harmonized legal framework with european requirements.

       In the context of celebrating European Data Protection Day, NCPDP reaffirms its commitment to supporting both the public and private sectors in the preparation process for the application of the new legal provisions. Information, training and institutional dialogue activities remain priorities to ensure efficient and responsible implementation of the new regulatory framework.

       At the same time, strengthening inter-institutional collaboration at the national level constitutes a strategic direction of action, in order to amplify efforts to raise awareness among society regarding the importance of personal data protection and the correct and uniform application of legislation in the field by all actors involved in data processing.

       The role of the NCPDP, as a national supervisory authority, is becoming increasingly important in the context of accelerated digital transformation. The annual marking of European Data Protection Day represents a relevant opportunity to bring to the public’s attention the importance of respecting data protection principles, the right to privacy and the right to the protection of personal data, as fundamental elements of a democratic and resilient society.