# Compliance documentation Source: https://conformitate.md/en/services/compliance-documentation Services Compliance documentation brings together, as applicable, the documents through which your company applies Law No. 195/2024: the record of processing activities (art. 30), the information for data subjects (art. 13 and 14), data protection policies (art. 24), contracts with processors (art. 28), the security measures (art. 32) and the rules for those who work with the data only on the controller's instructions (art. 29). We prepare them on the basis of what your company actually does. ## What the Law provides 1. Article 12 [Transparency of information, communications and modalities for the exercise of the rights of the data subject](https://conformitate.md/en/law-195-2024/article-12) 2. Article 13 [Information to be provided where personal data are collected from the data subject](https://conformitate.md/en/law-195-2024/article-13) 3. Article 14 [Information to be provided where personal data have not been obtained from the data subject](https://conformitate.md/en/law-195-2024/article-14) 4. Article 24 [Responsibility of the controller](https://conformitate.md/en/law-195-2024/article-24) 5. Article 28 [Processor](https://conformitate.md/en/law-195-2024/article-28) 6. Article 29 [Carrying out processing activities under the authority of the controller or the processor](https://conformitate.md/en/law-195-2024/article-29) 7. Article 30 [Records of processing activities](https://conformitate.md/en/law-195-2024/article-30) 8. Article 32 [Security of processing](https://conformitate.md/en/law-195-2024/article-32) 9. Article 33 [Notification of a personal data breach to the Centre](https://conformitate.md/en/law-195-2024/article-33) ## What we deliver - ✓ Data inventory and gap report - ✓ Records of processing activities, with the legal basis and retention period of each - ✓ Data protection policy and a description of the security measures - ✓ Privacy notices for each group of people: clients, employees, patients - ✓ Contracts with processors, new or reviewed - ✓ Internal rules for data subject requests and for personal data breaches - ✓ The confidentiality commitment and the written note for employees For whom Companies that want a complete compliance file they can make available to the National Centre for Personal Data Protection on request. What you get The documents of the chosen package, tailored to your company's activity and ready to sign and put into practice. The website, video surveillance, sensitive data and transfers outside Moldova are added as extra work or included in the Extended package. Timeframe Essential: 10 working days; Extended: 20–30 working days, counted from receipt of the company's information. For a custom offer, the timeframe is set after the analysis. What you give us - Answers to the questionnaire and the interview about the data processed, its purposes and the people concerned - The list of suppliers with access to the data and the existing contracts with them - Existing data protection documents - Comments on the draft documents, in the rounds of revisions Included in the packages Included in every package, from 5,900 MDL [Request an offer →](https://conformitate.md/en/services/compliance-documentation#oferta) [Compare the packages →](https://conformitate.md/en/pricing) [Calculate the price →](https://conformitate.md/en/tools/price-calculator) ## How we work - We sign a contract and issue an invoice. - Work starts once the contract is signed. - On request, we sign a confidentiality agreement (NDA). - We deliver the documents by email, signed if you ask. FAQ ## Questions about this service ### Is it enough to have the documents? No. The Law requires measures that are applied, not just written down: the controller implements appropriate technical and organisational measures and must be able to demonstrate that processing complies with the Law. The documents describe what the company does; applying them is up to the company. [art. 5](https://conformitate.md/en/law-195-2024/article-5 "Principles relating to processing") [art. 24](https://conformitate.md/en/law-195-2024/article-24 "Responsibility of the controller") ### Do we have to file the documents with the Centre? No. Law No. 195/2024 provides for no registration of controllers and no filing of documents. The records of processing activities are made available to the Centre on request, and the controller cooperates with the Centre on request. [art. 30](https://conformitate.md/en/law-195-2024/article-30 "Records of processing activities") [art. 31](https://conformitate.md/en/law-195-2024/article-31 "Cooperation with the Centre") ### What happens when the company's activity changes? The measures are reviewed and updated where necessary, and the record must reflect the actual processing activities. After delivery, you can order annual support, which includes updating the documents when the law or your activity changes. [art. 24](https://conformitate.md/en/law-195-2024/article-24 "Responsibility of the controller") [art. 30](https://conformitate.md/en/law-195-2024/article-30 "Records of processing activities") Related pages [Principles of processing and legal bases](https://conformitate.md/en/law-195-2024/principles-and-legal-bases) [Data subject rights](https://conformitate.md/en/law-195-2024/data-subject-rights) [Controller and processor obligations](https://conformitate.md/en/law-195-2024/controller-and-processor-obligations) [Medical & dental clinics](https://conformitate.md/en/industries/medical-clinics) [Homeowners associations](https://conformitate.md/en/industries/homeowners-associations) [Accounting firms](https://conformitate.md/en/industries/accounting-firms) [Online stores](https://conformitate.md/en/industries/online-stores) [Data access request](https://conformitate.md/en/situations/data-access-request) [Inspection by the Centre](https://conformitate.md/en/situations/inspection-by-the-centre) [Case study: medical clinic](https://conformitate.md/en/case-studies/medical-clinic) [Case study: accounting firm](https://conformitate.md/en/case-studies/accounting-firm) [Case study: homeowners association](https://conformitate.md/en/case-studies/homeowners-association) [Case study: online store](https://conformitate.md/en/case-studies/online-store) --- Provider: conformitate.md · RIGHT CONSULT COMPANY (IDNO 1022600002005) · MD-2072, mun. Chișinău, sect. Botanica, str. Grenoble 259/6, of. 57 Phone: +373 767 27 667 · Email: contact@conformitate.md Prices: https://conformitate.md/en/pricing