In Moldova, the control and evidence of organizations that process personal data is performed by the National Center for Personal Data Protection („Center”).
Personal data must be understood as information about an individual – name, surname, personal identity number, bank details or signature of the person, etc.
Any company that processes (collects, stores or transmits, etc.) personal data during the course of its business must comply with certain specific obligations imposed by law to control the way data is managed and to protect the rights of data subjects.
Before processing personal data intended for a specific purpose, enterprises and organizations are required to notify the Center of this fact, indicating the data to be processed, the purpose of processing, data evidence systems, etc. and obtain a registration number at the first notification.
The national protection system is rigid and complex, and involves the accountability and participation of enterprises and organizations for their protection.
Recommendation: If you process personal data of any kind of an identified or identifiable person – we recommend familiarizing yourself with legal obligations and registering as a personal data controller by submitting a notification to the National Center for Personal Data Protection.