MoldovaMoldova Law No. 195/2024, the Centre, complaints, compensation and sanctions
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force 27 days, effective 23 August 2026.
An enforcement supervision rule binding public and private bodies.
As of 19 September 2026.
What it requires
- Expect a person in Moldova to have a court-enforceable damages claim for material or non-material harm from an infringement of this law, separate from a complaint to the National Centre.
- Expect a data subject to be able to lodge a complaint with the National Centre for Personal Data Protection about your processing, and to challenge the Centre's own action or inaction.
- Answer the Centre's examination procedure once it is opened against you, and expect the sanctions the law provides at the end of it.
If you get it wrong
Criminal exposureNo
Private right of actionYes
Penalty structure
Law 195/2024 Article 88(2) sets the higher fine tier at up to 2,000,000 Moldovan lei or, for an undertaking, up to 2% of total turnover in the year preceding the sanctioning, whichever is higher, for breaches including the basic principles of processing and consent, data subject rights, cross-border transfers, Chapter VI obligations, and non-compliance with a Centre corrective measure. Article 88(1) sets a lower tier at up to 1,000,000 lei or 1% of turnover, whichever is higher, for narrower controller, processor, certification-body and monitoring-body obligations. Both tiers apply to public authorities and institutions as well as private undertakings under Article 88(4). Article 90(4), a transitional provision, phases enforcement in over three years from the law's 2026-08-23 entry into force: only 10% of the determined fine amount is collectible in the first year, 40% in the second year, and the full amount from the third year onward, so a fine imposed while the law is this new is capped at a fraction of these ceilings regardless of the infringement's severity.
- Rule
- Higher of
- As of
- 2 September 2026
- Currency
- MDL
- Fixed cap
- 2,000,000
- Turnover percentage cap
- 2
Who enforces it
Enforcement body
National Centre for Personal Data Protection (Centrul National pentru Protectia Datelor cu Caracter Personal), Moldova's independent public-authority supervisory body under Law 195/2024.
What it reaches
Obligation class
Governance, Reporting
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Articles 55 to 71 establish the National Centre for Personal Data Protection, fix its status, funding, mission, tasks and powers, its leadership and the appointment of its Director and Deputy Directors, and the appointment and liability of data protection inspectors. Article 72 gives a data subject the right to lodge a complaint with the Centre, and article 73 the right to challenge the Centre's actions or inactions.
Article 76 entitles any person who has suffered material or non-material damage from an infringement of the law to compensation from the controller or processor, a claim that runs in court separately from a complaint to the Centre. Article 77 opens the Centre's examination procedure, and the articles that follow govern how it is conducted and the sanctions that close it.
Article 89(1) enters the Law into force on the expiry of 24 months from the date of its publication in the Official Gazette of the Republic of Moldova. The Law's front matter dates that publication 23 August 2024, so these provisions bind from 23 August 2026.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbothigh_risk_decisionsis_listed_company
Read the law
Official statute PDF hosted by datepersonale.md, read in full (169,952 characters, untruncated)
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.