Moldova Law No. 195/2024, rights of the data subject

Legea Nr. 195 din 25 iulie 2024, articolele 12-23 (drepturile subiectului de date)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force 28 days, effective 23 August 2026.

A data subject rights rule binding public and private bodies.

As of 19 September 2026.

What it requires

Do not subject a person to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or similarly significantly affects them, and where a carve-out applies, give them human intervention, a chance to express their point of view and a way to contest the decision.
Give a data subject, at collection, your identity and contact details, the purposes and legal basis of the processing, the recipients, any transfer abroad, the retention period and their rights, and where the data came from elsewhere, its source and the categories concerned.
Answer a request for access, rectification, erasure, restriction or portability, and notify every recipient the data was disclosed to of a rectification, erasure or restriction you carry out.
Stop processing personal data for direct marketing as soon as the data subject objects, including the profiling related to it.

What it reaches

Obligation class

Data subject rights, Disclosure

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Articles 13 and 14 fix the information a controller gives when it collects personal data from the data subject and where the data came from elsewhere. Article 15 gives a right of access, article 16 a right to rectification, article 17 a right to erasure, article 18 a right to restriction of processing, article 19 the duty to notify recipients of a rectification, erasure or restriction, article 20 a right to data portability and article 21 a right to object, including to direct marketing.

Article 22 gives the data subject the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, and where a carve-out applies the controller must implement suitable measures to safeguard their rights, freedoms and legitimate interests, at least the right to obtain human intervention, to express a point of view and to contest the decision.

Article 23 sets the restrictions on those rights. Article 89(1) enters the Law into force on the expiry of 24 months from the date of its publication in the Official Gazette of the Republic of Moldova. The Law's front matter dates that publication 23 August 2024, so these provisions bind from 23 August 2026.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach
high_risk_decisions

Read the law

Official statute PDF hosted by datepersonale.md, read in full (169,952 characters, untruncated)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app