# Article 33. Notification of a personal data breach to the Centre

Source: https://conformitate.md/en/law-195-2024/article-33
Law version: 2026-10-15 · Official source: legis.md (https://www.legis.md/cautare/getResults?doc_id=144681&lang=ro)
Notice: The Romanian and Russian texts are those published in Monitorul Oficial. This English text is an unofficial translation by conformitate.md and has no legal force. Not an official publication. The Law was published in Monitorul Oficial No. 367-369/2024, art. 574.

Chapter IV · Section 2

(1) In the case of a personal data breach, the controller shall notify the Centre thereof without undue delay and, where possible, not later than 72 hours from the date on which it became aware of it, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. Where the notification is not made within 72 hours, it shall be accompanied by a reasoned explanation of the delay.

(2) The processor shall notify the controller without undue delay after becoming aware of a personal data breach.

(3) The notification referred to in paragraph (1) shall at least:

a) describe the nature of the personal data breach including, where possible, the categories and approximate number of data subjects concerned and the categories and approximate number of personal data records concerned;

b) communicate the name and contact details of the data protection officer or other contact point where more information can be obtained;

c) describe the likely consequences of the personal data breach;

d) describe the measures taken or proposed to be taken by the controller to address the personal data breach, including, where applicable, measures to mitigate its possible adverse effects.

(4) Where, and in so far as, it is not possible to provide the information at the same time, the information may be provided in phases without undue delay.

(5) The controller shall keep documents relating to all cases of personal data breach, comprising a description of the factual situation in which the personal data breach occurred, of its effects and of the remedial action taken. That documentation shall enable the Centre to verify compliance with this Article.

Related topics [Security of processing](https://conformitate.md/en/law-195-2024/security-and-breaches)

## How we can help with this

-   [Data breach response support →](https://conformitate.md/en/services/breach-response-support)
    
    Support when a personal data breach occurs: we assess the risk and prepare the notification and communication that Law No. 195/2024 requires.
    
-   [Employee data protection briefing in Moldova →](https://conformitate.md/en/services/employee-briefing)
    
    A briefing and advice session for employees who process personal data, built on your company's own documents and on Law No. 195/2024.

---

Provider: conformitate.md · RIGHT CONSULT COMPANY (IDNO 1022600002005) · MD-2072, mun. Chișinău, sect. Botanica, str. Grenoble 259/6, of. 57  
Phone: +373 767 27 667 · Email: contact@conformitate.md  
Prices: https://conformitate.md/en/pricing