Training course in the field of personal data protection for employees of the Central Municipal Clinical Hospital

       On 17 August 2026, the National Center for Personal Data Protection (NCPDP) organized a training course for employees of the Central Municipal Clinical Hospital, aimed at strengthening the professional knowledge and skills of the institution’s staff in the field of personal data protection and supporting the proper application of the legal framework in the healthcare institution’s activities.

       The training course forms part of the NCPDP’s efforts to inform, train and raise awareness among institutions about the importance of personal data protection and takes place in a particularly important context: on 23 August 2026, Law No. 195/2024 on personal data protection enters into force, strengthening the national legal framework and aligning it with European standards in this field.

       During the event, the main provisions of the new legal framework were presented and discussed, including the principles relating to the processing of personal data, the legal bases for processing, the rights of data subjects, and the obligations of controllers. Particular emphasis was placed on the specific aspects of processing data concerning health, given their particularly sensitive nature and the need to ensure an appropriate level of protection.

       Participants also discussed the confidentiality and security of patients’ data, the prevention of unauthorized access to and disclosure of information, the secure transmission of data, the management of security incidents, as well as the role and responsibilities of the Data Protection Officer (DPO). The topics covered were complemented by practical examples and concrete situations relevant to the day-to-day activities of a healthcare institution.

       The training highlighted that, in the healthcare sector, personal data protection is not merely a legal obligation, but also an essential component of respecting patients’ privacy, dignity and rights. Every employee who processes or has access to personal data plays an important role in preventing their unauthorized disclosure, loss or misuse.

       Among the key takeaways from the training were the need for a responsible approach to personal data at every stage of processing, restricting access to personal data based on the duties and responsibilities of authorized persons, paying particular attention to appropriate security measures, and promptly reporting any potential security incidents. At the same time, continuous staff training represents an important tool for preventing risks and strengthening an institutional culture focused on personal data protection.

       Through this activity, the NCPDP reaffirms its commitment to supporting public and private institutions in understanding and properly applying personal data protection rules, thereby contributing to a high level of protection of individuals’ rights and freedoms.

       A total of 60 representatives of the Central Municipal Clinical Hospital participated in the training.