Site map
Every page of the site, grouped by section.
Main pages
Services
Industries
Checklists
Case studies
Situations
The law by topic
- Principles and legal bases
- Data subject rights
- Controller and processor obligations
- Security and personal data breaches
- Impact assessment and prior consultation
- The data protection officer
- Transfers to other states
- Specific processing situations
- The Centre, complaints and inspections
- Fines
- Transition from Law No. 133/2011
Tools
Law No. 195/2024
- Law 195/2024
- 1Subject matter and purpose of the Law
- 2Material scope
- 3Territorial scope
- 4Definitions
- 5Principles relating to processing
- 6Lawfulness of processing
- 7Conditions for consent
- 8Consent of children in relation to information society services
- 9Processing of special categories of personal data
- 10Processing of personal data relating to criminal convictions and offences
- 11Processing which does not require identification
- 12Transparency of information, communications and modalities for the exercise of the rights of the data subject
- 13Information to be provided where personal data are collected from the data subject
- 14Information to be provided where personal data have not been obtained from the data subject
- 15Right of access by the data subject
- 16Right to rectification
- 17Right to erasure (‘right to be forgotten’)
- 18Right to restriction of processing
- 19Notification obligation regarding rectification or erasure of personal data or restriction of processing
- 20Right to data portability
- 21Right to object
- 22Automated individual decision-making, including profiling
- 23Restrictions
- 24Responsibility of the controller
- 25Data protection by design and by default
- 26Joint controllers
- 27Representatives of controllers or processors not established in the Republic of Moldova
- 28Processor
- 29Carrying out processing activities under the authority of the controller or the processor
- 30Records of processing activities
- 31Cooperation with the Centre
- 32Security of processing
- 33Notification of a personal data breach to the Centre
- 34Communication of a personal data breach to the data subject
- 35Data protection impact assessment
- 36Prior consultation
- 37Designation of the data protection officer
- 38Position of the data protection officer
- 39Tasks of the data protection officer
- 40Codes of conduct
- 41Monitoring of approved codes of conduct
- 42Certification
- 43Certification bodies
- 44General principle for transfers
- 45Transfers on the basis of a decision on the adequacy of the level of protection
- 46Transfers on the basis of appropriate safeguards
- 47Binding corporate rules
- 48Transfers or disclosures of information not authorised by normative acts
- 49Derogations for specific situations
- 50International cooperation in the field of personal data protection
- 51Processing and freedom of expression
- 52Processing and access to information of public interest
- 53Processing of a national identification number
- 54Processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
- 55Status of the Centre
- 56Financing of the activity of the Centre
- 57Staff ceiling and structure of the Centre
- 58Mission of the Centre
- 59Tasks of the Centre
- 60Powers of the Centre
- 61Activity report
- 62Management of the Centre
- 63Appointment of the Director of the Centre
- 64Appointment of the Deputy Directors of the Centre
- 65Duties of the Director and of the Deputy Directors of the Centre
- 66Termination of the term of office of the Director and of the Deputy Directors of the Centre
- 67Staff of the Centre
- 68Data protection inspector
- 69Appointment to the position of data protection inspector
- 70Liability of the data protection inspector
- 71Status of the staff of the Centre
- 72Right to lodge a complaint with the Centre
- 73Right to challenge the actions or inaction of the Centre
- 74Right to bring an action before a court against a controller or processor
- 75Representation of data subjects
- 76Right to compensation and liability
- 77Initiation of the examination procedure
- 78Stages of the examination procedure
- 79Lodging of the complaint
- 80Preliminary examination of the complaint
- 81Investigation
- 82Requests for information
- 83Confidentiality
- 84Issue and communication of decisions
- 85Execution of the decisions of the Centre
- 86Fine
- 87General conditions for imposing fines
- 88Infringements punishable by a fine
- 89Final provisions
- 90Transitional provisions
Glossary
- Glossary
- Binding corporate rules
- Biometric data
- Consent
- Controller
- Data concerning health
- Direct marketing
- Enterprise
- Establishment
- Filing system
- Genetic data
- Group of enterprises
- Information society services
- International organisation
- National identification number
- Personal data
- Personal data breach
- Processing
- Processor
- Profiling
- Pseudonymisation
- Recipient
- Representative
- Restriction of processing
- Third party
- Total turnover