Data protection for organisations

Data protection for companies
Personal data processing helps to achieve the goals of each organization and is closely related to its main activities. However, processing of personal data is subject to specific national or international regulation. Personal data processing requirements in European Union (EU) are set up now by EU General data protection regulation (GDPR). GDPR will be applicable from the 25th May 2018.
Many companies in Moldova are serving for companies in EU thus offering goods and services. For example, In the year 2017, the total export of goods to the EU from Moldova was 1596,6 million US dollars, representing 65,8% of the total exports of goods that year. An important part of all citizens of the Republic of Moldova has work and business relations with other EU countries. Besides that, the state has decided to develop country integration in EU and to implement EU rules in different sectors, including data protection. In this context, there will be more and more situations when companies in Moldova are subject to the direct applicability of GDPR or to indirect applicability when a company serves as a processor for the company in EU.
The aim of this study, first of all, is to raise awareness concerning cases of direct applicability of GDPR to companies in Moldova and offer recommendations for implementation of GDPR principles and explanations of main GDPR requirements as well.
This impact study was prepared to take into account results of meetings organized by National Center for Personal data protection (NCPDP) with private sector associations and companies and review their answers on existing data processing practice as well.
This document consists of three main parts:
a) explanation of main terms of GDPR .
b) indication of all typical situations where GDPR are directly and indirectly applicable to company operating in Moldova with some examples .
c) data protection recommendations concerning GDPR implementation steps and main understanding of core requirements.