In accordance with the General Data Protection Regulation (GDPR), you have the following rights over your personal data:
- Right to be informed: You can obtain information about the processing of your personal data.
- Right of access: You can obtain access to the personal data held about you.
- Right to rectification: You can ask for incorrect, inaccurate or incomplete personal data to be corrected.
- Right to erasure: You can request that personal data be erased when it’s no longer needed or if processing it is unlawful.
- Right to restriction of processing: You can request the restriction of the processing of your personal data in specific cases.
- Right to data portability: You can receive your personal data in a machine-readable format and send it to another controller.
- Right to object: You can object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation.
- Rights in relation to automated decision-making and profiling: You can request that decisions based on your personal data and that significantly affect you are made by natural persons, not only by computers.
Personal data protection - the regulatory framework of the Republic of Moldova
Enforcement of the GDPR in cross-border cases
Regulation (EU) 2025/2518 (adopted on and published in the Official Journal on ) sets procedural rules for enforcing the GDPR in cross-border cases (where more than one EU / European Economic Area authority is involved). The goal is to make investigations and complaint-handling faster and more consistent across Member States.
The regulation strengthens and standardises processes such as how complaints are lodged and assessed, cooperation between the lead supervisory authority and other concerned authorities, and clearer procedural rights for key parties (complainants and parties under investigation). It is intended to improve efficiency and legal certainty in cross-border GDPR enforcement while supporting smoother coordination between regulators.
The procedural rules for cross-border enforcement laid down in Regulation (EU) 2025/2518 apply from .
RELATED DOCUMENTS
As part of European Union (EU) data protection reform, along with Regulation (EU) 2016/679 (GDPR), it is also using the following EU key legislation:
- Directive (EU) 2016/680, the Data Protection Law Enforcement Directive (LED) ensures the protection of personal data of individuals involved in criminal proceedings, be it as witnesses, victims or suspects.
- Regulation (EU) 2018/1725 on the protection of individuals with regard to the processing of personal data by the EU institutions, bodies, offices and agencies.



