# Compliance assessment Source: https://conformitate.md/en/services/compliance-assessment Services The assessment shows how far your company’s processing of personal data complies with Law No. 195/2024. The controller is responsible for compliance with the principles of processing and must be able to demonstrate it (art. 5(2) and art. 24(1)). You receive a written report of what is missing and the priorities for putting it right. You can order the assessment on its own, and it is also the first step of every package. ## What the Law provides 1. Article 5 [Principles relating to processing](https://conformitate.md/en/law-195-2024/article-5) 2. Article 24 [Responsibility of the controller](https://conformitate.md/en/law-195-2024/article-24) 3. Article 30 [Records of processing activities](https://conformitate.md/en/law-195-2024/article-30) ## What we deliver - ✓ Online interviews with the people who know how the company processes data - ✓ Inventory of the personal data you process - ✓ Analysis of whether you must keep a record of processing activities - ✓ A written report of what is missing under Law No. 195/2024 - ✓ Priorities for putting it right, starting with the highest risks For whom Companies that first want to know where they stand: they have documents drafted under Law No. 133/2011, have implemented the GDPR for clients in the European Union, or are starting from scratch and want to decide what to do next. Every package already includes an assessment. What you get A written report of what is missing under Law No. 195/2024 and the priorities for putting it right. The assessment does not include drafting the documents: they are prepared in a package, and the price of a separate assessment is not deducted from the package price. Timeframe The timeframe is set in the offer, after the free consultation, according to the number of processing activities and interviews. What you give us - A contact person who knows the company's activity - Answers to the interview questions about the data processed and its purposes - The list of suppliers with access to the data: accountant, IT, hosting, courier - Existing data protection documents, including those drafted under Law No. 133/2011 Assessment on its own from 3,900 MDL [Request the assessment →](https://conformitate.md/en/services/compliance-assessment?pkg=assessment#oferta) ## How we work - We sign a contract and issue an invoice. - Work starts once the contract is signed. - On request, we sign a confidentiality agreement (NDA). - We deliver the documents by email, signed if you ask. FAQ ## Questions about this service ### Does the assessment include drafting the documents? No. You receive the report of what is missing and the priorities for putting it right; the company puts the measures in place and must be able to demonstrate that its processing complies with the Law. We draft the documents in a package. Every package starts with its own assessment, included in its price, which is why the price of a separate assessment is not deducted from the package. [art. 24](https://conformitate.md/en/law-195-2024/article-24 "Responsibility of the controller") ### We have documents drafted under Law No. 133/2011. Are they still valid? Law No. 133/2011 was repealed when Law No. 195/2024 entered into force, on 23 August 2026. Old documents refer to a law that is no longer in force and do not reflect the rules of the new Law, such as the record of processing activities or notifying personal data breaches, where feasible, within 72 hours at the latest. Consents obtained under the old law remain valid if the way they were given meets the conditions of the new Law. The assessment shows what can be kept. [art. 30](https://conformitate.md/en/law-195-2024/article-30 "Records of processing activities") [art. 33](https://conformitate.md/en/law-195-2024/article-33 "Notification of a personal data breach to the Centre") [art. 90](https://conformitate.md/en/law-195-2024/article-90 "Transitional provisions") ### Do we have to keep a record of processing activities? As a rule, yes. The exemption for enterprises with fewer than 250 employees does not apply where the processing is likely to result in a risk to people's rights, is not occasional or includes special categories of data or data relating to criminal convictions. Payroll, for example, is not occasional processing. The assessment examines this obligation for your company. [art. 30](https://conformitate.md/en/law-195-2024/article-30 "Records of processing activities") Related pages [Data protection impact assessment](https://conformitate.md/en/law-195-2024/impact-assessment) [Transferring personal data outside Moldova](https://conformitate.md/en/law-195-2024/transfers-to-other-states) [Specific processing situations](https://conformitate.md/en/law-195-2024/specific-processing-situations) [Complaint to Moldova's data protection authority](https://conformitate.md/en/law-195-2024/centre-complaints-and-inspections) [Data protection fines in Moldova](https://conformitate.md/en/law-195-2024/fines) [Law 133/2011 replaced: moving to Law 195/2024](https://conformitate.md/en/law-195-2024/transition-from-law-133-2011) [Medical & dental clinics](https://conformitate.md/en/industries/medical-clinics) [Homeowners associations](https://conformitate.md/en/industries/homeowners-associations) [Accounting firms](https://conformitate.md/en/industries/accounting-firms) [Online stores](https://conformitate.md/en/industries/online-stores) [Inspection by the Centre](https://conformitate.md/en/situations/inspection-by-the-centre) [Case study: medical clinic](https://conformitate.md/en/case-studies/medical-clinic) [Case study: accounting firm](https://conformitate.md/en/case-studies/accounting-firm) [Case study: homeowners association](https://conformitate.md/en/case-studies/homeowners-association) [Case study: online store](https://conformitate.md/en/case-studies/online-store) --- Provider: conformitate.md · RIGHT CONSULT COMPANY (IDNO 1022600002005) · MD-2072, mun. Chișinău, sect. Botanica, str. Grenoble 259/6, of. 57 Phone: +373 767 27 667 · Email: contact@conformitate.md Prices: https://conformitate.md/en/pricing