TITLE: Moldova Ratifies Protocol Amending Convention on Personal Data Protection
BODY:
On March 20, 2026, the Republic of Moldova ratified the Protocol amending the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data through Law 36/2026. The National Centre for Personal Data Protection (CNPDCP) announced the publication of the Protocol in the Official Gazette of the Republic of Moldova.
The Protocol, known as "Convention 108+", modernises the international framework for personal data protection to ensure a high level of protection for fundamental rights and freedoms, particularly the right to privacy, in response to technological developments and globalisation of data flows. Key provisions include: strengthening personal data protection; reinforcing rights of data subjects; expanding the category of sensitive data to include genetic, biometric, and ethnic origin data; introducing safeguards for decisions based solely on automated processing; establishing clear obligations for data operators, including rules for international data transfers; and enhancing operator accountability, transparency of processing, and effective supervision mechanisms through strengthened independent control authorities and intensified international cooperation.
The ratification aligns the Republic of Moldova with international and European standards on personal data protection. Law 36/2026 enters into force on August 23, 2026. The CNPDCP encourages public authorities, the private sector, and other relevant actors to pay increased attention to the new requirements and take necessary measures to ensure compliance with updated standards in the field.
REFERENCES:
National Centre for Personal Data Protection (CNPDCP) official announcement, datepersonale.md