# Article 12. Transparency of information, communications and modalities for the exercise of the rights of the data subject

Source: https://conformitate.md/en/law-195-2024/article-12
Law version: 2026-10-15 · Official source: legis.md (https://www.legis.md/cautare/getResults?doc_id=144681&lang=ro)
Notice: The Romanian and Russian texts are those published in Monitorul Oficial. This English text is an unofficial translation by conformitate.md and has no legal force. Not an official publication. The Law was published in Monitorul Oficial No. 367-369/2024, art. 574.

Chapter III · Section 1

(1) The controller shall take appropriate measures to provide the data subject with any information referred to in art. 13 and 14 and any communication under art. 15–22 and 34 relating to processing in a concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed to a child. The information shall be provided in writing or by other means, including, where appropriate, in electronic form. When requested by the data subject, the information may be provided orally, provided that the identity of the data subject is proven by other means.

(2) The controller shall facilitate the exercise of the rights of the data subject under art. 15–22. In the cases referred to in art. 11(2), the controller shall not refuse to act on the request of the data subject to exercise his or her rights under art. 15–22, unless the controller demonstrates that it is not in a position to identify the data subject.

(3) The controller shall provide the data subject with information on action taken on a request under art. 15–22 without undue delay and in any event within one month of receipt of the request. That period may be extended by two months where necessary, taking into account the complexity and number of the requests. The controller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the data subject makes the request in electronic form, the information shall be provided in electronic form where possible, unless the data subject requests another format.

(4) If the controller does not take action on the request of the data subject, the controller shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for not taking action and of the possibility of lodging a complaint with the Centre and of bringing an action before a court.

(5) Information provided under art. 13 and 14 and any communication and any actions taken under art. 15–22 and 34 shall be provided free of charge. Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may:

a) charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or

b) refuse to act on the request. In such cases, the controller shall bear the burden of demonstrating the manifestly unfounded or excessive character of the request.

(6) Without prejudice to art. 11, where the controller has reasonable doubts concerning the identity of the natural person making the request referred to in art. 15–21, the controller may request the provision of additional information necessary to confirm the identity of the data subject.

(7) The information to be provided to data subjects pursuant to art. 13 and 14 may be provided in combination with standardised icons in order to give, in an easily visible, intelligible and clearly legible manner, an overview of the intended processing. Where the icons are presented in electronic form, they shall be machine-readable.

(8) The Centre may approve acts for the purpose of determining the information to be presented by the icons and the procedure for providing standardised icons.

Related topics [Data subject rights](https://conformitate.md/en/law-195-2024/data-subject-rights)

## How we can help with this

-   [GDPR Moldova compliance documentation →](https://conformitate.md/en/services/compliance-documentation)
    
    We prepare the data protection documents that Law No. 195/2024 requires for your company’s activity, ready for you to sign and put into practice.

---

Provider: conformitate.md · RIGHT CONSULT COMPANY (IDNO 1022600002005) · MD-2072, mun. Chișinău, sect. Botanica, str. Grenoble 259/6, of. 57  
Phone: +373 767 27 667 · Email: contact@conformitate.md  
Prices: https://conformitate.md/en/pricing