July 9, 2026, Chisinau – The processing of personal data by competent authorities, within the framework of the activities of prevention, detection and investigation of crimes, as well as in the process of criminal prosecution, trial of criminal cases and execution of sentences, will take place on the basis of new rules.The provisions are included in draft law on the protection of personal data processed for the purpose of preventing and combating crime, drafted by the Ministry of Justice and adopted today, in first reading, with the vote of 63 deputies.
The project will ensure a fair balance between two essential objectives: the efficient exercise of the powers of the competent authorities in the field of preventing and combating crime, as well as guaranteeing an adequate level of protection of personal data.
For data subjects, the draft strengthens the applicable guarantees in a particularly sensitive area, where data processing must be carried out according to clear, predictable and proportionate rules.It also regulates the exercise of the right to information, access, rectification, erasure or restriction of processing, while taking into account the need to protect investigations, public order and the rights of others.
An important element is that, in cases provided for by law, the data subject will also be able to exercise his or her rights through the National Center for Personal Data Protection.This solution provides an additional guarantee of independent control over the lawfulness of data processing.The project also establishes guarantees regarding the accuracy, security and confidentiality of data, contributing to the effective protection of the individual and strengthening trust in state institutions.
At the same time, the new provisions will establish clear obligations for competent authorities that process personal data, including the obligation to ensure the lawfulness of processing, limiting the use of data to the purposes provided by law, keeping them only for as long as necessary, as well as applying appropriate technical and organizational measures for data protection.
Through these provisions, the draft establishes a clear, modern and balanced framework, which will allow the use of personal data for legitimate law enforcement purposes, while respecting the fundamental rights of the individual.
In 2024, the Parliament of the Republic of Moldova adopted Personal Data Protection Law, which transposes the General Data Protection Regulation of the European Union into national law and which is due to enter into force on August 23, 2026. The draft law voted by Parliament today continues efforts to align with European Union practices and standards, including by transposing EU Directive 2016/680.
The draft law was reviewed by representatives of the European Commission, who positively endorsed the document without raising objections.They also stressed that the draft, together with the Law on Personal Data Protection, will contribute to the consolidation of a modern and solid regulatory framework in the field of data protection, in line with the European Union acquis.