On November 12-13, 2025, representatives of the National Center for Personal Data Protection (NCPDP) participated in the Moldova Cyber ​​Summit 2025: Stronger Together, an event dedicated to strengthening digital resilience and international cooperation in the field of cybersecurity.

       The summit explored the strategic, technical and human dimensions of cybersecurity, transforming local and international lessons into concrete actions and highlighting Moldova’s growing role as a regional leader in cyber resilience and European integration.

       Victoria Muntean, Director of NCPDP, delivered a welcoming message at the opening of the summit, noting that, “cyber threats know no borders, and data protection and digital resilience can only be achieved through joint efforts of all — data controllers from the public and private sectors, civil society and international partners. The Republic of Moldova is strengthening, with responsibility and determination, its status as a credible regional partner in the field of cybersecurity and personal data protection, constantly advancing on the path of harmonizing these priority areas with European standards. In this context, today’s event is a significant stage in the process of digital modernization based on trust, transparency and responsibility.”

Several topics were addressed during the summit, such as:

• Strengthening Moldova’s national cybersecurity governance and institutional capacity;
• Supporting legislative and operational alignment with European standards;
• Sharing regional and international experiences in safeguarding critical systems, individuals and democratic processes;
• Promoting public trust and fostering partnerships among government, the private sector and international allies.

       The event brought together over 150 leaders and experts from government institutions, critical infrastructure sectors, the European Union, NATO and the cybersecurity community, and was organized by the E-Governance Academy (eGA), in partnership with the Ministry of Economic Development and Digitalization of the Republic of Moldova, and funded by the European Union through the Moldova Cybersecurity Rapid Assistance project.

       On November 6, 2025, the National Center for Personal Data Protection (NCPDP) organized a training session in the field of personal data protection for representatives of the Superior Council of Magistracy (SCM), at their request.

       The main goal of the activity was to develop the professional skills of the participants in order to correctly and uniformly apply the legal framework regarding the protection of personal data, as well as to consolidate an institutional culture based on responsibility, transparency and respect for the private life of the person.

       Important topics were discussed during the event, such as: defining general notions related to the field of personal data protection; the rights of personal data subjects; requirements regarding the protection of personal data in the exercise of official duties; ensuring the security and confidentiality of processed personal data; examining requests for disclosure of personal data; access to information of public interest from the perspective of the legislation on the protection of personal data, etc.

       The participants appreciated the practical nature of the training, emphasizing the usefulness of the knowledge acquired in the current activity of the SCM and the judicial system as a whole. Following the session, they became aware of the importance of applying the principle of responsibility, continuous risk assessment, and implementing appropriate technical and organizational measures to protect personal data processed within the institution. The training session also provided a framework for dialogue between NCPDP specialists and SCM representatives, facilitating the exchange of good practices and the analysis of concrete situations encountered in daily activity.

       Among the conclusions highlighted following the training session are: recognition of the essential role of data protection as an integral part of good governance and public trust in justice institutions; the need for continuous staff training to meet the challenges brought by technological and legislative developments; the importance of a proactive and preventive approach to data management, which reduces the risks of violating the rights of data subjects.

       By conducting this training session, NCPDP reaffirms its commitment to supporting public institutions in the process of implementing legal requirements regarding data protection, providing methodological support and continuous professional training to strengthen a sustainable compliance and security system. Such activities contribute to the creation of an institutional environment based on trust, ethics and respect for fundamental human rights, indispensable elements for the proper functioning of the rule of law.

       During the event, moderated by experts in the field of personal data protection from the NCPDP, 40 representatives of the SCM were trained.

       On November 5, the National Center for Personal Data Protection (NCPDP) continued its information and awareness campaign for the school community, organizing the training session “Personal data protection and children’s safety in the online environment” for the Public Institution “Universul” Theoretical High School in Chisinau. The event took place during the Personal Development class, the target audience being students of the 4th grade “B”.

       The main objective of the training session was to familiarize children with the notion of personal data, understand its value, and raise awareness of the risks they may be exposed to when providing information about themselves online. Through an approach adapted to the age of the participants, the NCPDP trainers managed to create a dynamic and interactive educational framework, based on dialogue, thematic games, case studies and real-life examples.

       Students were challenged to determine the types of data that need to be protected (name, photo, address, phone number, etc.) and to identify safe and unsafe behaviors in their daily internet activities. They also learned how to react when receiving messages from unknown people, how to create secure passwords, how to manage information published on social networks, and why it is important to ask for support from parents or teachers in uncertain situations.

       During the activities, the trainers emphasized the development of students’ critical thinking, encouraging them to analyze the consequences of their actions in the digital environment and to understand the connection between privacy, safety, and respect for themselves and others. Through educational games and open dialogue, children learned that the protection of personal data is not just an imposed rule, but a form of care for their own lives and for other internet users.

       At the end of the training session, students realized that personal data is an important part of their identity and must be carefully protected; not all information should be shared online, even if it seems harmless; digital safety starts with simple gestures: secure passwords, caution in communication and attention to posted content; it is essential to talk to trusted adults when facing unusual or uncomfortable situations on the internet.

       Through this activity, students acquired practical knowledge and understood that responsibility for the protection of personal data is a skill that must be formed from childhood.

       The event was organized at the initiative of the National Council for the Protection of Children and Youth, training 37 students. At the same time, the information materials, as well as the gifts offered to the students, were developed with the support of the United Nations Children’s Fund (UNICEF).

       It should be noted that the information and awareness campaign for the school community was launched on April 15, 2022, and the NCPDP aims to continue this training format both in school institutions in Chisinau and in those in the districts of the republic. Through such actions, NCPDP reaffirms its commitment to contributing to the formation of a culture of data protection from an early age, promoting children’s safety in the online environment and strengthening partnerships with educational institutions across the country.

       On October 31, 2025, the National Center for Personal Data Protection (NCPDP) organized a training session in the field of personal data protection for employees of the Ministry of Finance (MF), at their request.

       The purpose of the training session was to train and develop the professional skills of MF employees in the field of personal data protection, through a practical and applied approach, adapted to the specifics of their activity. The training aimed at in-depth understanding of the fundamental principles of data processing, identifying the responsibilities of the institution as a data controller, as well as preventing risks related to improper access, use and storage of information containing personal data.

       Important topics were discussed during the event, such as: the definitions of  general notions related to the field of personal data protection; the rights of personal data subjects; the requirements regarding the protection of personal data in the exercise of official duties; ensuring the security and confidentiality of processed personal data; the examination of requests for disclosure of personal data;  the access to information of public interest from the perspective of the legislation on the protection of personal data, etc.

       The training session highlighted the fact that data protection is not just a formal requirement, but an essential component of modern governance, which contributes to ensuring transparency, strengthening institutional accountability and increasing public trust in the authority’s work.

       By actively participating in the training, MF employees demonstrated increased interest in improvement and openness to the application of compliant and ethical practices, as well as understanding the importance of a proactive approach in the field of data protection, recognizing that respecting confidentiality and the right to privacy is not only a legal obligation, but also an essential element of public trust.

       Following the activity, participants became aware of the importance of applying the principle of data minimization in all institutional processes and the need for constant risk assessment and implementation of appropriate security measures. At the same time, they understood the value of individual and collective responsibility in managing personal data and recognized that continuous professional training is an essential element of compliance and efficient and transparent governance.

       By carrying out this activity, NCPDP reaffirms its firm commitment to supporting public institutions in developing the professional capacities necessary to implement efficient and sustainable protection of personal data.

       Such training sesssions contribute not only to improve administrative practices, but also to strengthen an institutional climate based on ethics, responsibility and respect for fundamental human rights.

       During the event, 30 representatives of the Ministry of Finance were trained.

       On November 4, 2025, the National Center for Personal Data Protection (NCPDP) organized a training session in the field of personal data protection for the employees of the Leova Police Inspectorate, according to the training plan within the GIP subdivisions for 2025, approved and signed by the heads of the NCPDP and GIP on January 28 of this year.

       The purpose of the training session was to increase the level of perception of the employees of the Leova Police Inspectorate on the principles of personal data protection, as well as on ensuring the correct application of the legal provisions in the field, in the activity they carry out.

       Important topics were discussed during the event, such as: the definitions of general notions related to the field of personal data protection; the rights of personal data subjects; the processing of special categories of personal data; the legal way of processing personal data in the activity carried out by police bodies; the requirements regarding the protection of personal data in the exercise of official duties; ensuring the security and confidentiality of processed personal data, etc.

       For the representatives of the Leova Police Inspectorate, this training session proved to be particularly relevant, contributing to increasing awareness of institutional responsibility and the essential role of personal data protection in police activity.

       Following the training, the participants became aware of the need to protect citizens’ personal data in all operational processes; they understood the importance of applying the principle of data minimization and collecting only the information strictly necessary for the intended purpose; they recognized the role of risk assessment and the implementation of appropriate security measures to prevent unauthorized processing incidents and appreciated the value of continuous training as a tool for strengthening the organizational culture based on confidentiality, ethics and responsibility.

       Through this activity, NCPDP reaffirms its commitment to support the continuous training of employees of public institutions and to promote a culture of data protection, aimed at ensure respect for the fundamental rights of the individual. The training held at the Leova Police Inspectorate demonstrates once again the importance of collaboration between the NCPDP and law enforcement institutions, in order to ensure correct, legal and secure processing of personal data, in the interest of citizens and society.

       During the event, 36 representatives of the Leova Police Inspectorate were trained.

       On October 21, 2025, the National Center for Personal Data Protection (NCPDP) organized a training session in the field of personal data protection for employees of the Florești Police Inspectorate, according to the training plan within the General Police Inspectorate (GPI) subdivisions for 2025, approved and signed by the heads of the NCPDP and GPI on January 28 of this year.

       The purpose of the training session was to increase the level of perception of the employees of the Florești Police Inspectorate on the principles of personal data protection, as well as on ensuring the correct application of the legal provisions in the field, in the activity they carry out.

       Important topics were discussed during the event, such as: the definitions of general notions related to the field of personal data protection; the rights of personal data subjects; the processing of special categories of personal data; the legal way of processing personal data in the activity carried out by police bodies; requirements regarding the protection of personal data in the exercise of official duties; ensuring the security and confidentiality of processed personal data, etc.

       The training session stood out for its relevance and usefulness for the Florești Police Inspectorate, providing important support in developing the professional skills of employees and improving institutional mechanisms and procedures. Participants deepened their knowledge of the principles of legality, transparency and responsibility in the processing of personal data, discovered good practices applicable in institutional activity and better understood the obligations they have in their daily work.

       Following the training course, participants became aware of the importance of a proactive approach to personal data protection, recognizing the crucial role of compliance in maintaining a safe and fair environment. They learned how to identify risk situations, apply appropriate security measures, and manage data protection incidents in a responsible and transparent manner. At the same time, the training contributed to the development of an institutional culture based on respecting confidentiality and professional ethics, essential aspects for the proper functioning of public order institutions.

       By organizing these activities, NCPDP reconfirms its firm commitment to supporting the continuous professional development of staff within law enforcement institutions, providing them with the necessary tools for a better understanding and application of personal data protection legislation. At the same time, NCPDP aims to promote a unitary and responsible approach to the data processing process, thus contributing to the consolidation of an institutional culture based on respect for the fundamental rights of citizens and transparency in public activity.

       During the event, 69 representatives of the Florești Police Inspectorate were trained.

       On October 22, 2025, the National Center for Personal Data Protection (NCPDP) organized a training session in the field of personal data protection for representatives of the “Alexandru cel Bun” Military Academy of the Armed Forces (MAAF), at their request.

       The purpose of the training session was to strengthen the capacities of employees, pupils and students within the institution on the principles of personal data protection, as well as on the correct application of legal provisions in the field.

       Important topics were discussed during the event, such as:

• The definitions of general notions related to the field of personal data protection;
• The rights of personal data subjects;
• The principles and legal grounds for the processing of personal data;
• Ensuring the security and confidentiality of processed personal data, etc.

       The training session brought significant benefits to MAAF representatives, contributing to the consolidation of the necessary knowledge and skills in the field of personal data protection. Participants understood the importance of respecting the principles of confidentiality and responsibility in the process of processing personal data. At the same time, the training provided the opportunity to analyze practical examples, to identify risks related to improper management of personal data and to learn effective ways to prevent them.

       Following the event, the participants understood that the protection of personal data is a shared responsibility, which strengthens trust in the institution and they became aware of the need for continuous training to adapt to digital challenges and maintain a high standard of privacy protection.

       Through this training session, NCPDP contributes to the formation of an institutional culture based on responsibility, confidentiality and respect for the fundamental rights of the individual, while also providing support to teachers, pupils and students in correctly understanding how to protect their own and others’ personal data.

       Such training activities strengthen the partnership between NCPDP and institutions in the defense and education sectors, reflecting the shared commitment to promoting a secure, ethical and responsible environment in the use of information containing personal data.

       During the event, about 250 MAAF representatives were trained.

       On October 17, 2025, the National Center for Personal Data Protection (NCPDP) organized a training session in the field of personal data protection for representatives of the National Center for Sustainable Energy (NCSE), at their request.

       The training session aimed to familiarize NCSE officials with aspects related to the field of personal data protection in the public service, the regulation of processing procedures, the confidentiality and security regime of personal data in accordance with the legislation in force.

       During the event, important topics were discussed, such as: the definitions of the general notions related to the field of personal data protection; the rights of personal data subjects; the processing of special categories of personal data; the examination of requests for disclosure of personal data; the access to information of public interest from the perspective of personal data protection legislation, etc.

       In the current context of digitalization and the expansion of the use of information technologies in the energy field, public institutions are increasingly faced with challenges related to the management and security of personal data. The session offered participants the opportunity to gain a deeper understanding of the fundamental principles of data protection, the rights of data subjects and the obligations of data controllers.

       During the training, NCSE representatives had the opportunity to acquire practical knowledge regarding: correctly identifying the categories of personal data collected and processed in the institution’s activity; assessing the risks associated with data processing and applying appropriate protection measures; how to ensure transparency and correct information of data subjects and applying the principles of confidentiality, integrity and responsibility in the institution’s activities.

       By participating in the training session, NCSE representatives understood the need to implement clear internal policies on data protection, the role of continuous training in preventing security incidents and violations of the law, as well as the benefits of transparent and ethical communication with the public and institutional partners.

       Overall, the training activity contributed to strengthening interinstitutional cooperation and promoting a proactive approach to personal data protection – an essential aspect for good governance and public trust in state institutions.

       During the event, moderated by experts in the field of personal data protection from the NCPDP, 43 representatives of the NCSE were trained.

       On October 15, 2025, the National Center for Personal Data Protection (NCPDP) organized a training session in the field of personal data protection for representatives of the Border Police sector “Chisinau International Airport” of the General Inspectorate of Border Police (GIBP), according to the training plan within the GIBP subdivisions for 2025, approved and signed by the heads of NCPDP and GIBP on January 28 of this year.

       The purpose of the training session was to enhance the awareness of the employees of the Border Police Sector “Chisinau International Airport” of the GIBP on the principles of personal data protection, as well as to ensure the correct application of the legal provisions in the field, in the activity they carry out.

       Important topics were discussed during the event, such as: defining general notions related to the field of personal data protection; principles and legal grounds for the processing of personal data; rights of personal data subjects; processing of special categories of personal data; requirements regarding the protection of personal data in the exercise of official duties; ensuring the security and confidentiality of processed personal data, etc.

       The training session contributed significantly to strengthening the theoretical and practical knowledge of the participants regarding the correct application of national and european data protection legislation, especially in situations specific to the field of activity – state border control, document verification, inter-institutional cooperation and the use of information systems.

       Through the training, participants had the opportunity to clarify their responsibilities according to their competencies, as well as to more deeply understand the principles of legality, confidentiality, accuracy and proportionality in the process of processing personal data. At the same time, the training contributed to increasing the level of awareness regarding the risks associated with data processing in the context of the use of modern surveillance and control technologies, strengthening the institutional capacity to prevent data security incidents.

       Through this activity, NCPDP reaffirmed its role as a strategic partner of law enforcement institutions in promoting an organizational culture based on respecting the fundamental right to the protection of personal data, and for the representatives of the Border Police Sector “Chisinau International Airport” – the training represented an important step towards continuous alignment with european standards and good practices in the field.

       During the event, 50 representatives of the Border Police sector “Chisinau International Airport” of the GIBP were trained.

       The National Center for Personal Data Protection (NCPDP), for informational and practical purposes, reports on the fines imposed by the Italian Supervisory Authority (SA) in the amount of 3 million euros for the company Acea Energia spa and 850 00 euros to the agencies involved for violating art. 5 paragraph. (1), art. 6, art. 7, art. 13, art. 24, art. 25, art. 28, art. 29, art. 32 of the GDPR and art. 130 of the National Personal Data Protection Code.

       The Italian SA conducted investigations, together with the Guardia di Finanza, following a complaint regarding the illegal activity of unauthorized call centers. They were contacting people for offers regarding energy or telephony suppliers, using databases obtained without consent and without being registered in the Register of Communications Operators (ROC).

        Investigations revealed that the personal data of customers who had recently changed their energy supplier was being used to persuade them, through deceptive methods, to sign new contracts. The data came from the network of partner companies, without the information of the individuals concerned.

       Although representatives of the energy company were in contact with the telemarketing agencies, the company revoked the collaboration and applied corrective measures once it learned of the irregularities.

       In this context, the Italian SA imposed fines of 3 million euros on the Acea Energia company spa and 850 000 euros on the agencies involved. The company must notify affected individuals and verify the legality of sub-processors, and agencies can no longer use legally unjustified contact lists.

       NCPDP, as the national supervisory authority for the processing of personal data, emphasizes the responsibility of personal data controllers to comply with the provisions of the legislative framework on the protection of personal data and to ensure that personal data processing operations comply with the legislation in force.