Cybersecurity laws are the legal framework and regulations for protecting digital assets, data and networks from cyber threats and data breaches.
These laws require organizations to implement security measures, protect customer data, and manage risks, and hold them accountable for security and require them to report significant cyber incidents.
The Cybersecurity Agency of the Republic of Moldova is an administrative authority subordinated to the Ministry of Economic Development and Digitalization, has the status of a legal entity under public law with the legal organization form of an agency, headquartered in the municipality of Chisinau.
The Agency has the mission to implement the state policy in the field of cybersecurity, in order to ensure a high common level of security of networks and information systems of service providers, which are essential for the functioning of society and the state.
In order to achieve its mission, the Agency performs the following functions:
1) identification and record keeping of service providers;
2) state supervision and control of compliance by service providers with the regulatory framework in the field of cybersecurity;
3) national and international cooperation and exchange of information in the field of cybersecurity;
4) national single point of contact;
5) national cyber incident response team;
6) methodological guidance and regulation;
7) research and development.
The main legal basis of the Republic of Moldova
- Law No. 48/2023 on cybersecurity
- Law No. 124/2022 on electronic identification and trust services
- Law No. 142/2018 on data exchange and interoperability
- Parliamentary Decision No. 257/2018 on the approval of the Information Security Strategy of the Republic of Moldova for 2019–2024 and the Action Plan for its implementation
- Government Decision No. 860/2024 on the identification of service providers
- Government Decision No. 1028/2023 on the establishment, organization and operation of the Cyber Security Agency
- Government Decision No. 333/2024 on the establishment, organization and operation of the Cyber Security Coordinating Council
The EU regulatory framework
- Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union
- Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (Text with EEA relevance)
- Proposal for a Regulation of the European Parliament and of the Council on horizontal cybersecurity requirements for products with digital elements and amending Regulation (EU) 2019/1020
- The EU Cybersecurity Strategy for the Digital Decade
Useful links