Under the new regulations, anyone who believes their personal data has been used unlawfully will be able to contact the Center. Complaints may be filed within one year of becoming aware of a possible violation, but no later than three years from the date of the violation itself.
The Center will be able to conduct investigations both in response to complaints from citizens and on its own initiative. During investigations, the Center’s specialists will have the right to request necessary documents and information, as well as to inspect the systems and equipment used to process personal data.
Organizations responsible for data processing and the authorized representatives they engage will be required to cooperate with the supervisory authority. If violations are identified, the Center will be able to issue mandatory orders and impose fines.
Individuals who have suffered material or emotional harm due to a violation of personal data processing rules will be able to seek compensation from the responsible organizations.
The amount of the fine will be determined based on the nature and severity of the violation, its duration, the number of affected individuals, the type of data involved, and the extent to which the company cooperates with the supervisory authority. Fines of up to 1 million lei or up to 1% of a company’s annual turnover are provided for certain violations, while the most serious violations are subject to fines of up to 2 million lei or up to 2% of annual turnover.
It should be noted that on August 6, the Moldovan Investors Association (AIM) will host a free online webinar for entrepreneurs focused on the new requirements in the field of personal data protection. Participants will learn about the main changes to the legislation, new obligations for companies, the measures necessary to ensure compliance, data protection impact assessments, as well as ways to prevent and respond to security incidents.
Follow our updates
