MD-LAW-195-2024
Law No. 195/2024 on the Protection of Personal Data
National Center for Personal Data Protection
🇲🇩Moldova
Skin
Moldova overview
Moldova's new GDPR-aligned law takes effect on 23 August 2026
Law No. 195/2024 on the Protection of Personal Data replaces Law No. 133/2011 on 23 August 2026. It implements a GDPR-style accountability framework supervised by the National Center for Personal Data Protection (CNPDCP).
Operational points
The law covers qualifying offers to and monitoring of people in Moldova by organisations abroad, subject to its territorial rules. It sets 14 as the digital-consent age and includes notices, one-month rights handling, processor terms, records, security, 72-hour breach notification, DPIAs, DPOs and transfer rules.
The locally retained CNPDCP PDF is an official implementation overview, not the full statute. The controlling full text is the official Legis publication linked on the law record.
What this means for you
Transition from Law No. 133/2011 to Law No. 195/2024 now. Refresh notices and contracts, map the age-14 rule and foreign representative duty, test breach and DPIA workflows, and review overseas disclosures against Article 48.