# Employee briefing and advice

Source: https://conformitate.md/en/services/employee-briefing

Services

The controller and the processor take steps to ensure that any natural person acting under their authority who has access to personal data processes them only on instructions from the controller (art. 32(4)). Informing and advising the employees who carry out processing is also one of the data protection officer's tasks (art. 39(1)(a)). Where the company processes the national identification number (IDNP) on the basis of legitimate interest, the Law also requires regular instruction, on their obligations, of the people who process it under the company's authority (art. 53(2)(c)).

## What the Law provides

1.  Article 24 [Responsibility of the controller](https://conformitate.md/en/law-195-2024/article-24)
2.  Article 29 [Carrying out processing activities under the authority of the controller or the processor](https://conformitate.md/en/law-195-2024/article-29)
3.  Article 32 [Security of processing](https://conformitate.md/en/law-195-2024/article-32)
4.  Article 39 [Tasks of the data protection officer](https://conformitate.md/en/law-195-2024/article-39)
5.  Article 53 [Processing of a national identification number](https://conformitate.md/en/law-195-2024/article-53)

## What we deliver

-   ✓ An online briefing session for up to 20 people
-   ✓ Explaining the company's documents and procedures with examples from its own activity
-   ✓ Answers to employees' questions
-   ✓ An attendance list, kept by the company

For whom

Companies that have their data protection documents and want the employees who work every day with the data of clients, patients or colleagues to know their obligations.

What you get

Employees who know the controller's instructions and their obligations under Law No. 195/2024, and an attendance list the company keeps as evidence of the measures taken (art. 24(1)).

Timeframe

The date of the session is agreed with the company once its data protection documents are ready.

What you give us

-   The company's data protection documents
-   The list of participants, up to 20 people per session
-   Situations from the employees' work you want us to discuss

Briefing session 4,000 MDL / session, up to 20 people

-   Online, for up to 20 people
-   At the company's office in Chișinău: plus the office visit, 4,000 MDL

[Request a session →](https://conformitate.md/en/services/employee-briefing?pkg=briefing#oferta)

## How we work

-   We sign a contract and issue an invoice.
-   Work starts once the contract is signed.
-   On request, we sign a confidentiality agreement (NDA).
-   We deliver the documents by email, signed if you ask.

FAQ

## Questions about this service

### Why a session if we already have the documents?

Documents do not help if employees do not know them. Anyone acting under the controller's authority who has access to the data processes it only on the controller's instructions, and where the company processes the IDNP on the basis of legitimate interest, the Law requires regular instruction of those who process it. [art. 29](https://conformitate.md/en/law-195-2024/article-29 "Carrying out processing activities under the authority of the controller or the processor") [art. 32](https://conformitate.md/en/law-195-2024/article-32 "Security of processing") [art. 53](https://conformitate.md/en/law-195-2024/article-53 "Processing of a national identification number")

### Do employees receive a certificate?

No. The session informs the company's employees on its own documents and does not end with a certificate. The company receives the attendance list, which, together with the documents, shows the measures taken. [art. 24](https://conformitate.md/en/law-195-2024/article-24 "Responsibility of the controller")

### Can the session take place at our office?

Yes, at the company's office in Chișinău. In that case the price of the office visit, shown next to the price of the session, is added. [art. 32](https://conformitate.md/en/law-195-2024/article-32 "Security of processing")

### We do not have data protection documents yet. Can we start with the session?

The session is built on the company's documents, because employees must know the controller's instructions. If you do not have them, start with a package: each includes the written note for employees and the confidentiality commitment. [art. 24](https://conformitate.md/en/law-195-2024/article-24 "Responsibility of the controller") [art. 29](https://conformitate.md/en/law-195-2024/article-29 "Carrying out processing activities under the authority of the controller or the processor")

Related pages

[Security of processing](https://conformitate.md/en/law-195-2024/security-and-breaches) [Medical & dental clinics](https://conformitate.md/en/industries/medical-clinics) [Accounting firms](https://conformitate.md/en/industries/accounting-firms) [Personal data breach: what to do](https://conformitate.md/en/situations/data-breach) [Case study: medical clinic](https://conformitate.md/en/case-studies/medical-clinic) [Case study: accounting firm](https://conformitate.md/en/case-studies/accounting-firm)

---

Provider: conformitate.md · RIGHT CONSULT COMPANY (IDNO 1022600002005) · MD-2072, mun. Chișinău, sect. Botanica, str. Grenoble 259/6, of. 57  
Phone: +373 767 27 667 · Email: contact@conformitate.md  
Prices: https://conformitate.md/en/pricing
