# The Centre, complaints and inspections

Source: https://conformitate.md/en/law-195-2024/centre-complaints-and-inspections
Updated: 2026-10-17

Law 195/2024

The National Centre for Personal Data Protection supervises the application of Law No. 195/2024 (art. 58). It examines complaints from data subjects (art. 72), may also open investigations ex officio (art. 77, 81), and has investigative and corrective powers, including fines, as well as authorisation and advisory powers (art. 60).

## What the Centre is

The National Centre for Personal Data Protection is the independent national public authority that supervises the application of the Law [art. 55(1)](https://conformitate.md/en/law-195-2024/article-55#p1 "Status of the Centre"), [art. 58(1)](https://conformitate.md/en/law-195-2024/article-58#p1 "Mission of the Centre"). It is financed from the state budget [art. 56(1)](https://conformitate.md/en/law-195-2024/article-56#p1 "Financing of the activity of the Centre") and headed by a Director appointed by Parliament through a competition for a term of 7 years [art. 63(1)](https://conformitate.md/en/law-195-2024/article-63#p1 "Appointment of the Director of the Centre"). Complaints and investigations are handled by data protection inspectors [art. 68(1)](https://conformitate.md/en/law-195-2024/article-68#p1 "Data protection inspector"). The Centre does not supervise courts acting in the administration of justice [art. 58(2)](https://conformitate.md/en/law-195-2024/article-58#p2 "Mission of the Centre").

## Tasks and powers

The Centre monitors the application of the Law, examines complaints, conducts investigations and approves instruments such as standard contractual clauses, the list of processing operations that require an impact assessment, and binding corporate rules [art. 59(1)](https://conformitate.md/en/law-195-2024/article-59#p1 "Tasks of the Centre"). Each year, by 31 March, it submits an activity report to Parliament and the Government [art. 61(1)](https://conformitate.md/en/law-195-2024/article-61#p1 "Activity report").

Its powers are of three kinds [art. 60](https://conformitate.md/en/law-195-2024/article-60 "Powers of the Centre"):

-   **investigative:** it may order any information to be provided, carry out audits, and obtain access to data and to the controller’s premises in accordance with normative acts [art. 60(1)](https://conformitate.md/en/law-195-2024/article-60#p1 "Powers of the Centre");
-   **corrective:** it may issue alerts and warnings, order processing to be brought into compliance, order data subjects to be informed, limit or ban processing, and impose fines [art. 60(2)](https://conformitate.md/en/law-195-2024/article-60#p2 "Powers of the Centre");
-   **authorisation and advisory:** it advises in prior consultation and approves codes of conduct, clauses and certifications [art. 60(3)](https://conformitate.md/en/law-195-2024/article-60#p3 "Powers of the Centre").

## Complaints and remedies

Any data subject may lodge a complaint with the Centre if he or she considers that the processing of his or her data infringes the Law [art. 72(1)](https://conformitate.md/en/law-195-2024/article-72#p1 "Right to lodge a complaint with the Centre"), within one year of the date on which he or she could have become aware of the infringement, but no later than 3 years after it occurred [art. 72(2)](https://conformitate.md/en/law-195-2024/article-72#p2 "Right to lodge a complaint with the Centre"). The data subject may also go directly to court [art. 74](https://conformitate.md/en/law-195-2024/article-74 "Right to bring an action before a court against a controller or processor") and may obtain compensation from the controller or processor for material or non-material damage suffered [art. 76(1)](https://conformitate.md/en/law-195-2024/article-76#p1 "Right to compensation and liability"). The actions or inaction of the Centre may be challenged directly in court [art. 73(1)](https://conformitate.md/en/law-195-2024/article-73#p1 "Right to challenge the actions or inaction of the Centre").

## How an examination proceeds

The Centre opens an examination on a data subject’s complaint or ex officio [art. 77(1)](https://conformitate.md/en/law-195-2024/article-77#p1 "Initiation of the examination procedure"). A complaint first undergoes a preliminary examination, within 30 days of registration [art. 80(1)](https://conformitate.md/en/law-195-2024/article-80#p1 "Preliminary examination of the complaint"). After the preliminary examination of a complaint, the Centre orders an investigation if there are reasonable grounds to suspect an infringement [art. 81(2)](https://conformitate.md/en/law-195-2024/article-81#p2 "Investigation"). Ex officio investigations may be triggered, among other things, by personal data breach notifications [art. 81(3)(a)](https://conformitate.md/en/law-195-2024/article-81#p3-a "Investigation").

The Centre first requests documents and information; an on-site investigation takes place only if these are insufficient [art. 81(7)](https://conformitate.md/en/law-195-2024/article-81#p7 "Investigation"). The period for providing information is at least 5 working days [art. 82(2)](https://conformitate.md/en/law-195-2024/article-82#p2 "Requests for information"). All natural and legal persons are required to submit to the investigation [art. 81(14)](https://conformitate.md/en/law-195-2024/article-81#p14 "Investigation"), and the company under investigation has the right to submit evidence and explanations and to be assisted by a lawyer [art. 81(12)](https://conformitate.md/en/law-195-2024/article-81#p12 "Investigation").

An investigation lasts up to 6 months, with justified extensions of one month at a time, but no more than 12 months [art. 81(25)](https://conformitate.md/en/law-195-2024/article-81#p25 "Investigation"). The draft decision is communicated to the parties, who have 30 days to raise objections [art. 81(23)](https://conformitate.md/en/law-195-2024/article-81#p23 "Investigation").

## The decision and its execution

The Centre issues a reasoned decision on whether an infringement occurred and on the measures applied [art. 84(1)](https://conformitate.md/en/law-195-2024/article-84#p1 "Issue and communication of decisions"), communicates it within 10 working days [art. 84(2)](https://conformitate.md/en/law-195-2024/article-84#p2 "Issue and communication of decisions") and publishes a summary of its decisions [art. 84(3)](https://conformitate.md/en/law-195-2024/article-84#p3 "Issue and communication of decisions"). The decision is executed within the period it sets, which the Centre may fix at up to 6 months and, in complex cases, extend at the reasoned request of the controller or processor [art. 85(1)](https://conformitate.md/en/law-195-2024/article-85#p1 "Execution of the decisions of the Centre"), and the period for voluntary payment of a fine is at least two months [art. 85(2)](https://conformitate.md/en/law-195-2024/article-85#p2 "Execution of the decisions of the Centre").

Specific situations

-   [Data protection inspection in Moldova by the Centre →](https://conformitate.md/en/situations/inspection-by-the-centre)

## How we can help with this

-   [GDPR Moldova compliance assessment →](https://conformitate.md/en/services/compliance-assessment)
    
    We assess online how your company processes personal data and give you a written report of what is missing under Law No. 195/2024, in order of priority.
    

## Articles in this topic

1.  [Article 55 Status of the Centre](https://conformitate.md/en/law-195-2024/article-55)
2.  [Article 56 Financing of the activity of the Centre](https://conformitate.md/en/law-195-2024/article-56)
3.  [Article 57 Staff ceiling and structure of the Centre](https://conformitate.md/en/law-195-2024/article-57)
4.  [Article 58 Mission of the Centre](https://conformitate.md/en/law-195-2024/article-58)
5.  [Article 59 Tasks of the Centre](https://conformitate.md/en/law-195-2024/article-59)
6.  [Article 60 Powers of the Centre](https://conformitate.md/en/law-195-2024/article-60)
7.  [Article 61 Activity report](https://conformitate.md/en/law-195-2024/article-61)
8.  [Article 62 Management of the Centre](https://conformitate.md/en/law-195-2024/article-62)
9.  [Article 63 Appointment of the Director of the Centre](https://conformitate.md/en/law-195-2024/article-63)
10.  [Article 64 Appointment of the Deputy Directors of the Centre](https://conformitate.md/en/law-195-2024/article-64)
11.  [Article 65 Duties of the Director and of the Deputy Directors of the Centre](https://conformitate.md/en/law-195-2024/article-65)
12.  [Article 66 Termination of the term of office of the Director and of the Deputy Directors of the Centre](https://conformitate.md/en/law-195-2024/article-66)
13.  [Article 67 Staff of the Centre](https://conformitate.md/en/law-195-2024/article-67)
14.  [Article 68 Data protection inspector](https://conformitate.md/en/law-195-2024/article-68)
15.  [Article 69 Appointment to the position of data protection inspector](https://conformitate.md/en/law-195-2024/article-69)
16.  [Article 70 Liability of the data protection inspector](https://conformitate.md/en/law-195-2024/article-70)
17.  [Article 71 Status of the staff of the Centre](https://conformitate.md/en/law-195-2024/article-71)
18.  [Article 72 Right to lodge a complaint with the Centre](https://conformitate.md/en/law-195-2024/article-72)
19.  [Article 73 Right to challenge the actions or inaction of the Centre](https://conformitate.md/en/law-195-2024/article-73)
20.  [Article 74 Right to bring an action before a court against a controller or processor](https://conformitate.md/en/law-195-2024/article-74)
21.  [Article 75 Representation of data subjects](https://conformitate.md/en/law-195-2024/article-75)
22.  [Article 76 Right to compensation and liability](https://conformitate.md/en/law-195-2024/article-76)
23.  [Article 77 Initiation of the examination procedure](https://conformitate.md/en/law-195-2024/article-77)
24.  [Article 78 Stages of the examination procedure](https://conformitate.md/en/law-195-2024/article-78)
25.  [Article 79 Lodging of the complaint](https://conformitate.md/en/law-195-2024/article-79)
26.  [Article 80 Preliminary examination of the complaint](https://conformitate.md/en/law-195-2024/article-80)
27.  [Article 81 Investigation](https://conformitate.md/en/law-195-2024/article-81)
28.  [Article 82 Requests for information](https://conformitate.md/en/law-195-2024/article-82)
29.  [Article 83 Confidentiality](https://conformitate.md/en/law-195-2024/article-83)
30.  [Article 84 Issue and communication of decisions](https://conformitate.md/en/law-195-2024/article-84)
31.  [Article 85 Execution of the decisions of the Centre](https://conformitate.md/en/law-195-2024/article-85)

**The Romanian and Russian texts are those published in Monitorul Oficial. This English text is an unofficial translation by conformitate.md and has no legal force.**

Not an official publication. The Law was published in Monitorul Oficial No. 367-369/2024, art. 574.

Text verified on 15 October 2026 · [Romanian text on legis.md](https://www.legis.md/cautare/getResults?doc_id=144681&lang=ro)

FAQ

## What clients ask us

### Can the Centre open an investigation without a complaint?

Yes. The Centre may open an examination ex officio, for example following a personal data breach notification or on the basis of information from other sources that reasonably indicates a possible infringement. [art. 77](https://conformitate.md/en/law-195-2024/article-77 "Initiation of the examination procedure") [art. 81](https://conformitate.md/en/law-195-2024/article-81 "Investigation")

### How long does an investigation take?

Up to 6 months from its opening, with the possibility of justified extensions of one month at a time, but no more than 12 months in total, depending on the complexity of the case and other relevant factors. [art. 81](https://conformitate.md/en/law-195-2024/article-81 "Investigation")

### What rights does a company under investigation have?

It may obtain a copy of the delegation or the information about the investigation, submit evidence and explanations, and be assisted by a lawyer. Before the decision, it receives the draft and has 30 days to raise objections. [art. 81](https://conformitate.md/en/law-195-2024/article-81 "Investigation")

### Within what period can a person lodge a complaint?

Within one year of the date on which the person could have become aware of the alleged infringement, but no later than 3 years after it occurred. For continuing infringements, the period runs from the last act or omission. [art. 72](https://conformitate.md/en/law-195-2024/article-72 "Right to lodge a complaint with the Centre")

---

Provider: conformitate.md · RIGHT CONSULT COMPANY (IDNO 1022600002005) · MD-2072, mun. Chișinău, sect. Botanica, str. Grenoble 259/6, of. 57  
Phone: +373 767 27 667 · Email: contact@conformitate.md  
Prices: https://conformitate.md/en/pricing