09
Tue, Aug
81 New Articles

Moldova: GDPR - Almost There

Moldova: GDPR - Almost There

Moldova
Tools
Typography
  • Smaller Small Medium Big Bigger
  • Default Helvetica Segoe Georgia Times

On 11 November 2021, the Moldovan Parliament passed a series of legal amendments ("Law 175/2021"), including to the existing Law on Personal Data Protection. Law 175/2021 entered into force on 10 January 2022 and partially transposes the European Union's General Data Protection Regulation ("GDPR").

No more registration with the supervising authority

The most important change is that personal data controllers will no longer be obliged to submit prior notification (which in essence was a registration application) to the National Centre for the Protection of Personal Data (the "Centre"). This will help controllers overcome the Centre's formalistic approach when checking applications. Now controllers are on their own, free to implement the measures as they deem adequate and sufficient to ensure compliance with Law 175/2021. As of the date of entrance into force of Law 175/2021, the Register of controllers, previously kept by the Centre, will cease to exist.

Obligation to carry out an impact assessment

Law 175/2021 imposes a mandatory impact assessment in case the type of processing, in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons. Where such a data protection impact assessment indicates that the personal data processing would lead to a high risk (and the controller believes the risk cannot be mitigated by reasonable means), the controller will be obliged to consult the Centre prior to initiating the respective personal data processing activity.

Data protection officer

Another novelty is the designation of a data protection officer. The cases where the controller is obliged to designate a data protection officer are similar to those listed in the GDPR (i.e. processing conducted by a public authority or institution, activities consisting in processing operations requiring regular and systematic monitoring of data subjects on a large scale, and activities consisting in the processing of special categories of personal data).

Cross-border personal data transfers

Under the new rules, the cross-border transfer of personal data is generally permitted, based on the principle of the free flow of personal data, to the Member States of the European Economic Area and to states that ensure an adequate level of personal data protection. The Centre is obliged to adopt and publish in the Official Gazette of Moldova the list of states ensuring an adequate level of personal data protection.

Conclusion

While admitting that the implementation of the new rules may require certain resources from the entities concerned to ensure they comply with the new rules, local personal data controllers may benefit from the experience of the European Union in implementing the transposed GDPR rules. Moreover, the amendments are a great opportunity for local subsidiaries to adapt their privacy policies to those of their parent companies.

By Andrian Guzun, Attorney at Law, and Viorica Cornescu, Associate, Schoenherr

Moldovan Knowledge Partner

ACI Partners is a leading law firm in Moldova with an expanding network of partners throughout Europe. ACI Partners was established in 2006 and since then has managed to build a very strong and competitive legal practice. Our business strategy strives to deliver a solid and reliable service, going beyond merely grasping the law, which the clients may turn to whenever they need. In reaching this goal, ACI Partners employs a personalized approach to each client, showing a genuine respect for their values and unqualified commitment to their interests and needs, steadily investing in knowledge and data management and ensuring a working environment consistent with our clients’ quality demands and high expectations.

ACI Partners is a one-stop shop law firm proficient in all possible legal matters a business might come across in Moldova, starting with incorporation of a business, and obtaining of all the necessary regulatory permits, continuing with various daily matters, such as contracts, labor, and migration, and finishing with dispute settlement, insolvencies, and criminal investigations. But we pride ourselves especially for our unmatched expertise in most innovative and complex areas for Moldova, as Modern Financial Products, Data Protection, Renewable Energy, Competition, Clinical Studies, Public Procurement, and Regulatory. In our work, we always involve a team of professionals with the relevant skill-mix, which enables us to provide our clients with an integrated and comprehensive advice, superior to our competitors.

ACI Partners has advised the Government of the Republic of Moldova, businesses, international organizations, and other institutions on most challenging transactions, assignments and projects.

ACI Partners is not just another law firm. Over the course of our existence and working in Moldova, and on the international stage for our non-Moldovan clients, we have developed a strong set of core values which, we believe, guide us in everything that we do and, moreover, gives us a competitive advantage – differentiating us from other firms on the market.

Firm's website.

Our Latest Issue