On February 12, 2026, the National Center for Personal Data Protection (NCPDP) organized a training course on personal data protection for representatives of the Eastern Regional Department of the General Inspectorate of Border Police (GIBP), an event that marked the start of the training program planned for 2026. The course was conducted in accordance with the Training Plan for GIBP subdivisions for 2026, approved and signed by the heads of the NCPDP and GIBP on January 28 of this year.

        The main objective of the course was to strengthen the professional capabilities of GIBP representatives regarding compliance and enforcement of legal regulations on personal data protection, given their essential role in processing a significant volume of data within the specific activities of state border surveillance, control and ensuring national security.

      During the training, NCPDP experts presented the applicable national and international regulatory framework in the field of personal data protection, with a focus on the fundamental principles of data processing, legal bases, special categories of data and the rights of data subjects. Particular attention was paid to the obligations of data controllers in the public sector, including requirements regarding transparency, proportionality, purpose limitation and ensuring the security of processing.

       At the same time, the specificities of personal data processing in the field of law enforcement were addressed, including aspects related to the collection, use, storage, and disclosure of data within the operational activities of the GIBP. In this regard, practical examples and specific situations encountered in their daily work were discussed and clarifications and recommendations were provided to prevent risks of violating applicable laws.

       The importance of organizing such a course arises from the need to ensure a high level of accountability and compliance among GIBP staff, who, by the nature of their duties, come into direct contact with citizens’ personal data. Strict compliance with legal requirements in this area contributes not only to protecting the fundamental rights of data subjects but also to strengthening public trust in the activity of the authorities responsible for maintaining order and security.

       By organizing this event, the NCPDP reaffirms its active role in promoting a culture of personal data protection and expresses its continued willingness to provide methodological and advisory support, as well as training activities, for representatives of the GIBP and other public authorities, with a view to ensuring that personal data is processed in strict compliance with applicable legislation and best practices at the national and international levels.

       During the event, 45 representatives of the Eastern Regional Directorate of the GIBP were trained.

       On February 13, 2026, the National Center for Personal Data Protection (NCPDP) organized a training course on personal data protection for employees of the Technical-Criminalistics and Forensic Expertise Center of the General Police Inspectorate (GPI), in accordance with the Training Plan for GPI subdivisions for 2026, approved and signed by the heads of the NCPDP and the GPI on January 28 of this year. This event marked the start of the training process planned for 2026.

       The main purpose of the training was to ensure the correct, consistent and legally compliant application of personal data protection rules in forensic expertise activities, areas that involve complex, frequent data processing and a high degree of data sensitivity.

       The training session covered the fundamental principles of personal data processing, the legal grounds applicable to the activities carried out by law enforcement agencies, the responsibilities of data controllers and processors, as well as the obligations of public institutions to safeguard the rights of data subjects.

       At the same time, the training had a strong practical focus, analyzing practical situations and case studies relevant to the activity of the Technical-Criminalistics and Forensic Expertise Center, with an emphasis on:

• compliance with the principles of lawfulness, proportionality and data minimization;
• limiting processing to specific, explicit  and legitimate purposes;
• implementing appropriate technical and organizational measures to ensure data security;
• preventing security incidents and the unauthorized disclosure of personal data.

       The importance of the event resides in strengthening the institutional culture regarding personal data protection, preventing risks of violations of the fundamental rights of data subjects and increasing the level of compliance of the activities carried out by the GPI with the provisions of current legislation. The training highlighted the role of data protection as an essential element of the legality of procedures and public trust in the work of law enforcement agencies.

       Following the course, the need for the following is highlighted: continuous training of personnel involved in data processing; integration of data protection requirements into all stages of operational activities; accountability of each employee in the personal data processing process; and strengthening of institutional cooperation to ensure uniform application of the regulatory framework.

       The NCPDP reaffirms its commitment to continuing its training and methodological support activities for public authorities, with a view to ensuring a high level of personal data protection and respect for the fundamental rights and freedoms of individuals.

       During the event, 74 representatives of the Technical-Criminalistics and Forensic Expertise Center of GPI were trained.

       On February 17, 2026, the National Center for Personal Data Protection (NCPDP) organized a training course on personal data protection for employees of the Northern Investigations Department of the National Investigations Inspectorate. The activity was conducted in accordance with the Training Plan for the subdivisions of the General Police Inspectorate (GPI) for the year 2026, a plan approved and signed by the heads of the NCPDP and the GPI on January 28 of this year.

       The main objective of the course was to strengthen participants’ theoretical and practical knowledge regarding the proper application of legislation in the field of personal data protection, particularly in the specific context of investigative activities and the processing of sensitive data.

       The training was of particular importance to the employees of the Northern Investigations Department, given the large volume of personal data processed in their operational activities, as well as the need for strict compliance with the principles of lawfulness, proportionality, confidentiality and data security. At the same time, the course helped prevent risks of violating the rights of data subjects and increased the level of professional accountability.

          The training covered topics such as:

•  the fundamental principles of personal data protection;
•  the legal grounds for data processing in investigative activities;
•  the rights of data subjects and the obligations of data controllers;
•  organizational and technical data security measures;
•  practical examples and common situations encountered in day-to-day activities.

       Following the training, participants strengthened their skills in the practical application of legal regulations, as well as their ability to correctly identify and manage situations involving the processing of personal data.

       The NCPDP reaffirms its willingness and openness to continue organizing such training courses, which are considered essential for ensuring uniform practices that comply with current legislation, as well as for strengthening a culture of data protection within public authorities.

        During the event, 20 representatives of the Northern Investigations Department of the National Investigations Inspectorate were trained.

       The National Center for the Protection of Personal Data (NCPDP), for informational purposes, announces about the development of Guidelines/explanations for the proper implementation of Law No. 195/2024 on personal data protection, a legislative act that will enter into force on August 23, 2026.

       The purpose of these Guidelines is to assist data controllers, processors and other stakeholders in understanding, interpreting, and correctly applying the new legal provisions, in a context marked by rapid technological developments and the intensification of personal data flows. The document provides explanations and reasoning intended to clarify the new requirements introduced by the law, promoting a modern approach based on risk assessment and management and on the proactive responsibility of data controllers.

       The guidelines were developed based on the principles established by Regulation (EU) 2016/679 and are aimed at ensuring a high level of protection for the fundamental rights and freedoms of natural persons, strengthening legal security and creating a clear and coherent framework to support consistent practices in the field of personal data protection.

       At the same time, the NCPDP notes that the document is intended as a guide and serves as a reference tool for the correct and uniform application of the provisions of Law No. 195/2024 on personal data protection and recommends to be consulted regularly.

       The full text of the Guidelines/explanations for the correct application of Law No. 195/2024 can be accessed via the following link:

CONSIDERENTE_Legea_195/2024   

       On February 20, 2026, the National Center for the Protection of Personal Data (NCPDP) organized and conducted a training session for employees of the Southern Investigations Department within the National Investigations Inspectorate. The training session was conducted in accordance with the Training Plan for the subdivisions of the General Police Inspectorate (GPI) for 2026, a document approved and signed on January 28, 2026, by the heads of the NCPDP and the GPI, with a view to strengthening institutional capacities regarding the uniform and correct application of the regulatory framework on data protection.

       The purpose of the training was to increase the level of awareness and accountability among staff with investigative duties, by deepening their knowledge of the fundamental principles of personal data processing, the legal grounds for processing, the conditions of legality and proportionality of intrusions within private life, as well as the obligations of controllers and processors.

       The session addressed key issues regarding:

•  the application of the principles of lawfulness, fairness and transparency in the processing of personal data, while also respecting the principles of data minimization and purpose limitation;
• ensuring data integrity and confidentiality through the implementation of appropriate technical and organizational measures;
• the specificities of data processing in the context of special investigative activities;
• handling requests from data subjects regarding the exercise of their rights guaranteed by applicable law;
• legal liability for violations of the personal data protection regime.

       In addition, representatives from the NCPDP provided explanations and practical recommendations regarding the documentation of data processing operations, the delimitation of functional responsibilities within operational units and the assessment of risks associated with data processing in investigative activities.

       The event took place in an interactive format, analyzing case studies relevant to the activity of the Southern Investigations Department, with a focus on identifying solutions compliant with the regulatory framework and relevant case law.

       By organizing these training activities, the CNPDCP reaffirms its commitment to strengthening the culture of data protection within public authorities, including law enforcement bodies, with a view to ensuring a fair balance between the need to fulfill legal obligations and respect for the fundamental rights and freedoms of individuals. At the same time, the NCPDP will continue to implement the Training Plan for 2026, in cooperation with the GPI, to ensure the consistent and effective application of personal data protection legislation.

       During the event, 17 representatives of the Southern Investigations Department of the National Investigations Inspectorate were trained.

       On February 19, 2026, the National Center for Personal Data Protection (NCPDP) organized a training course in the field of personal data protection for the representatives of the Information Technology Service (ITS) of the Ministry of Internal Affairs (MIA), at their request.

       The main objective of the course was to strengthen and enhance the theoretical and practical knowledge of the participants regarding the proper application of personal data protection regulations, with a focus on their responsibilities under the relevant legislation. The training was designed to assist ITS representatives in identifying and managing risks associated with data processing carried out through the information systems used within the Ministry of Internal Affairs.

       The training session covered, in detail, topics relevant to ITS’ specific activities, such as:

•  the fundamental principles of personal data processing;
•  the roles and responsibilities of controllers and processors from the perspective of the infrastructure managed by ITS;
• data processing security requirements and appropriate technical and organizational measures;
• security incident management and notification obligations;
• the impact of new legal provisions on existing and future information systems.

       Following the course, the need for effective collaboration between staff responsible for the administration and development of information systems and those responsible for ensuring legal compliance was highlighted, the importance of conducting ongoing risk assessments associated with data processing operations, as well as the essential role of continuous staff training in maintaining a high level of personal data protection.

       The NCPDP reaffirms its commitment to supporting public authorities in the process of adapting to new legislative requirements and to promoting a culture of data protection based on accountability, legality and security.

       During the event, 25 representatives of the Information Technology Service of MIA were trained.

       On February 24, 2026, the National Center for Personal Data Protection (NCPDP) organized a training course in the field of personal data protection for Customs Service employees, at their request.

       The training aimed to strengthen participants’ theoretical and practical knowledge regarding the proper application of the national regulatory framework in the field of personal data protection, as well as to clarify the obligations of public authorities in their role as data controllers. At the same time, the training aimed to increase the level of compliance of data processing operations carried out within the scope of customs-related activities.

       During the training session, the provisions of the national legal framework applicable to personal data protection were presented and analyzed in detail, with an emphasis on the fundamental principles of processing, the conditions of lawfulness, proportionality and transparency, as well as the obligations of data controllers and data processors. At the same time, the essential role of respecting the rights of data subjects in the context of operational activities carried out by customs officials was highlighted.

       Furthermore, the training aimed to clarify aspects related to ensuring the security of personal data, addressing the technical and organizational measures necessary to prevent unauthorized access, loss, destruction, or unlawful disclosure of data. Participants were informed about the individual responsibilities of staff involved in processing activities, as well as the importance of documenting and implementing internal procedures in accordance with legal requirements.

       A separate section of the activity focused on examining practical situations and case studies relevant to the work of the Customs Service, with the aim of identifying specific risks associated with the processing of personal data and implementing appropriate solutions to mitigate them. In this context, recommendations were formulated to ensure consistent and compliant practices within the institution.

       The NCPDP emphasizes the importance of institutional cooperation and the continuous training of public authority staff in the field of personal data protection as an indispensable element for strengthening legal certainty, increasing the level of legislative compliance and ensuring respect for the fundamental rights and freedoms of data subjects. At the same time, the NCPDP reaffirms its willingness to provide methodological and advisory support to public authorities, with a view to promoting an institutional culture based on legality, accountability and the effective protection of personal data.

      During the event, 132 customs officials were trained.

       On February 23, 2026, the National Center for Personal Data Protection (NCPDP) organized and conducted a training session for employees of the Customs Service, following a request submitted by them.

       The training course aimed to strengthen the institutional capacities of Customs Service representatives in the field of personal data protection by deepening their theoretical and practical knowledge of the relevant national regulatory framework, the principles of personal data processing, safeguards for the rights of data subjects, as well as the responsibilities of data controllers and data processors.

       The session addressed key issues concerning the legality and grounds for processing personal data in the exercise of the Customs Service’s functional duties, the application of the principles of proportionality and data minimization, ensuring the confidentiality and security of processed information, the management of security incidents, as well as mechanisms for cooperation with the supervisory authority.

       In addition, case studies relevant to the specific nature of customs activities were analyzed, including situations involving the exchange of data with other national and international public authorities, the use of automated information systems, as well as data processing in the context of customs control and fraud prevention. The focus was on identifying the risks associated with the processing of personal data and on implementing appropriate technical and organizational measures to prevent violations of relevant legislation.

       In the context of the Customs Service’s operational responsibilities, which involve the processing of a considerable volume of personal data, including sensitive data, the training emphasized the importance of integrating the principle of accountability into all operational processes, as well as the need for proper documentation of processing operations.

       Among the learnings from the course are:

•  the need for a prior assessment of risks to the fundamental rights and freedoms of individuals when implementing new procedures or information systems;
• strengthening the organizational culture regarding data protection;
• the designation and active involvement of the data protection officer in decision-making processes;
• ensuring ongoing training for staff responsible for data processing.

       The training highlighted the essential role of continuing professional development in preventing security incidents and ensuring compliance with applicable legal regulations. At the same time, it contributed to the standardization of internal practices and the consolidation of an operational framework compatible with national and international standards in the field of data protection.

       The NCPDP reiterates its willingness to provide methodological and advisory support to public authorities for the correct and uniform implementation of personal data protection legislation, emphasizing that the effective protection of the right to privacy is a fundamental condition for the lawful and transparent exercise of official duties.

       During the event, 145 customs officials were trained.

       On March 5, 2026, the National Center for Personal Data Protection (NCPDP) held a training course for employees of the Ialoveni Police Inspectorate (IP), an activity organized in accordance with the Training Plan within the subdivisions of the General Inspectorate of Police (GIP) for 2026. The respective Plan was approved and signed by the heads of the two institutions on January 28, 2026, with the objective of strengthening the level of knowledge and application of the regulatory framework in the field of personal data protection in the activity of police bodies.

       The purpose of the training was to strengthen the professional capacities of IP Ialoveni employees regarding the legal, responsible and secure processing of personal data, in the context of exercising their job duties, as well as in preventing possible violations of the legislation in the field.

       The training session addressed theoretical and practical aspects regarding:

• the fundamental principles of personal data processing;
• the legal grounds for data processing in the activity of law enforcement bodies;
•  the responsibilities of controllers and processors in the data processing procedure;
• the technical and organizational measures necessary to ensure data security;
• best practices and case studies on managing situations involving personal data in police activity.

       At the same time, participants had the opportunity to analyze concrete examples and practical situations encountered in the current activity of police bodies, highlighting the legal and institutional risks that may arise in the event of non-compliance with legal requirements regarding data protection.

       The lessons learned during the training focused, in particular, on the need to integrate data protection principles from the very beginning of operational processes, the proper application of rules regarding data access, storage and transmission, as well as strengthening each employee’s individual responsibility in managing information containing personal data.

       Conducting these training sessions helps to improve institutional compliance and strengthen an organizational culture based on respect for the right to privacy and data protection—aspects that are essential to the work of law enforcement bodies.

       By organizing these activities, the NCPDP reaffirms its commitment to supporting public authorities in the proper implementation of the legal framework for the protection of personal data by providing methodological support, training and the exchange of best practices.

       During the event, 63 representatives of the Ialoveni Police Inspectorate of GIP were trained.

       On February 27, the National Center for Personal Data Protection (NCPDP) conducted a training course for employees of the Călărași Police Inspectorate (IP). The activity was carried out in accordance with the Training Plan for the subdivisions of the General Police Inspectorate (GIP) for 2026, a plan approved and signed by the heads of the NCPDP and the GIP on January 28 of this year.

       The main objective of the training was to strengthen participants’ knowledge and understanding of the national regulatory framework for personal data protection, as well as to develop the practical skills of IP Călărași employees to ensure the correct and consistent application of legal provisions in data processing while performing their duties. At the same time, the training aimed to prevent risks of violating personal data protection legislation and to increase institutional accountability regarding the fundamental rights and freedoms of data subjects.

       The session covered the following topics:

• the fundamental principles of personal data processing (lawfulness, fairness, transparency, proportionality, and data minimization);
• the legal grounds applicable to police activity;
• the rights of data subjects and the means of ensuring their effective exercise;
• the obligations of data controllers and processors;
• the technical and organizational measures necessary to ensure data security;
• procedures for reporting and managing security incidents.

       As a result of the training, the following key takeaways were identified: the need for clear documentation of data processing operations; the importance of conducting a prior risk assessment for the processing of sensitive data; strict adherence to the principle of proportionality in the collection and use of data and the establishment of effective internal mechanisms for compliance monitoring and control.

       By organizing these activities, the NCPDP reaffirms its commitment to promoting an institutional culture based on legality, accountability and compliance with national and international data protection standards, as well as to strengthening inter-institutional cooperation in order to ensure an adequate level of data protection.

       During the event, 55 representatives of the Călărași Police Inspectorate were trained.