Republic of Moldova NCPDP Confirms New GDPR-Aligned Data Protection Framework Takes Effect on August 23, 2026

On August 23, 2026, the Republic of Moldova’s National Center for Personal Data Protection (NCPDP) confirmed that two major data-protection laws entered into force:

Law No. 195/2024 on personal data protection and Law No. 160/2026 on the protection of personal data processed for the prevention and combating of criminal offences. Law No. 195/2024, published on August 23, 2024, transposes the European Union General Data Protection Regulation (GDPR) into Moldova’s national framework and establishes rules covering data processing, supervision, data-subject rights, controller and processor responsibilities, security, accountability, and legal liability. Its two-year deferred-entry period has now ended. Law No. 160/2026 provides a separate framework for processing by competent authorities for law-enforcement and crime-prevention purposes, complementing the general law. The NCPDP describes August 23, 2026 as a key milestone in modernization and alignment with European data-protection standards. Organizations operating in Moldova should now treat the new framework as fully applicable and update governance, notices, records, security controls, rights-handling processes and processor arrangements as relevant.

Impact assessment:

High. A new binding national data-protection framework has become fully applicable after a two-year transition, affecting organizations across the public and private sectors.

Key reasons:

Law No. 195/2024 transposes GDPR principles and strengthens accountability, transparency, security and data-subject rights, while Law No. 160/2026 establishes a dedicated law-enforcement processing regime.

Who is affected?

Controllers, processors, digital-service providers, employers, public authorities, data protection officers, organizations transferring or otherwise processing personal data, and competent crime-prevention/law-enforcement authorities.

Conclusion:

Organizations should treat August 23, 2026 as an active compliance date and verify that governance, transparency, contracts, security, rights handling and accountability documentation conform to the new laws.