Key Facts
Overview
Moldova enacted a comprehensive GDPR-aligned data protection law on July 25, 2024, with enforcement beginning August 23, 2026 after a two-year preparation period. The law fully transposes the GDPR into Moldovan legislation, though the maximum penalty is capped at 1% of turnover rather than the GDPR's 4%.
What This Means for Your Website
- Explicit consent will be required before processing personal data of Moldovan visitors, including through cookies
- The law is not yet enforced — the two-year preparation period runs until August 23, 2026
- When enforcement begins, data minimization and purpose limitation principles will apply
- Maximum penalties are up to 1 million Moldovan lei or 1% of annual turnover
Key Requirements
The NCPDP (National Centre for Personal Data Protection) is established as the independent enforcement authority. The law requires explicit consent for personal data processing, purpose limitation, data minimization, and provides standard data subject rights. Penalties cap at 1% of turnover, significantly lower than GDPR levels. Enforcement begins August 23, 2026.
How ConsentStack Handles This
ConsentStack will apply GDPR-aligned consent standards for Moldovan visitors when enforcement begins in August 2026, ensuring websites are prepared for the new requirements.
Penalties
Up to 1 million Moldovan lei or up to 1% of annual turnover for companies.
Key Requirements
- Explicit consent before personal data processing including cookies
- Data collected only for legitimate, specific, and stated purposes
- Data minimization principle
- NCPDP notification and cooperation requirements
- Right to withdraw consent at any time
Notable Provisions
- Not yet enforced — two-year preparation period until August 23, 2026
- Fully transposes GDPR into Moldovan law
- Maximum penalty of 1% turnover (lower than GDPR 4%)
- NCPDP established as independent enforcement authority
Other Europe Regulations
Frequently Asked Questions
When does Moldova's data protection law take effect?
August 23, 2026. The law was enacted in July 2024 with a two-year preparation period before enforcement begins.
Is Moldova's law aligned with GDPR?
Yes. Law 195/2024 fully transposes the GDPR into Moldovan legislation, including consent requirements, purpose limitation, and data minimization.
What are the penalties under Moldova's data protection law?
Up to 1 million Moldovan lei or 1% of annual turnover — lower than the GDPR's 4% cap.
Stay compliant with Moldovan DPL
ConsentStack helps you implement Opt-in consent for Moldova automatically.