Moldova Law No. 195/2024, special categories, a child's consent and conviction data

Article 8 fixes the conditions on which a child's consent to an information society service offered directly to a child is lawful, and requires the controller to make reasonable efforts to verify that the holder of parental responsibility gave or authorised it, taking available technology into account.

Article 9(1) prohibits processing personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, and the processing of genetic data, of biometric data for the purpose of uniquely identifying a natural person, and of data concerning health or a natural person's sex life or sexual orientation; the law names facial images as a qualifying example of biometric data, so biometric material derived from an ordinary recording is not carved out of the prohibition.

Article 9(2) lifts that prohibition only in the cases it lists, beginning with the data subject's explicit consent to one or more specified purposes and running through employment and social security law, vital interests, the legitimate activities of a not-for-profit body confined to its members, data manifestly made public by the data subject, legal claims, substantial public interest, occupational medicine and health or social care provided under a duty of secrecy, public health, and archiving, research or statistics.

Article 10 governs the processing of personal data relating to criminal convictions and offences. Article 89(1) enters the Law into force on the expiry of 24 months from the date of its publication in the Official Gazette of the Republic of Moldova. The Law's front matter dates that publication 23 August 2024, so these provisions bind from 23 August 2026.