Almost any organization.
If you have customers, employees or partners who are individuals, you are already processing personal data. The size of the company does not matter.
Law No. 195 of July 25, 2024 on the protection of personal data came into force on August 23, 2026 and replaced Law No. 133/2011. It transposes EU Regulation 2016/679, known as the GDPR. Below is a short summary and links to the official sources. We do video analytics, not legal advice: what your company specifically has to do, a lawyer or the National Center for Personal Data Protection will tell you.
This page summarizes the official text of the law and the recommendations of the National Center for Personal Data Protection. It is not legal advice; for your specific situation, ask a lawyer.
Law No. 195/2024
A summary, not legal advice.
The law was published in the Official Gazette (Monitorul Oficial) No. 367-369, Article 574, on August 23, 2024, and entered into force two years after publication. Until then, Law No. 133/2011 applied. The new requirements that matter in practice are records of processing activities, data protection impact assessments (DPIAs), incident notification and the data protection officer.
If you have customers, employees or partners who are individuals, you are already processing personal data. The size of the company does not matter.
A video recording in which a person can be recognized is personal data. Cameras are not an exception to the law.
The National Center for Personal Data Protection receives complaints, carries out checks and imposes sanctions.
Law No. 195/2024 has no article dedicated to video surveillance. But an image in which a person can be recognised is personal data, so cameras fall under the law’s general rules: purpose, legal basis, informing the people filmed, retention period and security.
For cameras that film employees, an equally short summary is on the page about video cameras in the workplace.
Vizor is video analytics on the cameras you already have: it counts how many people come in, where they go, how long they wait at the checkout. What matters here is that you choose which legal regime you fall under, and that choice is reflected in what you have to document.
By default, the system tracks silhouettes and produces numbers: how many came in, which zones they spent time in, how long the queue lasted. No one is identified, no profile is built and there are no per-person reports. You stay within the general obligations — legal basis, informing people, storage period, security.
If you register employees in the system, they are recognized and their paths are linked to their names: hours, zones, time present. This takes you into individual monitoring, with everything it requires: a documented legal basis, a DPIA, informing each employee. A facial template is biometric data.
If you don’t want the heavy regime, the answer is simple: leave employees unregistered. The system works the same for counting customers, conversion and queues — identity isn’t needed for any of them.
The summary on this page does not replace the text of the law or the Center’s recommendations. For any decision, start from them.
This page was updated on . It is not legal advice; for your specific situation, ask a lawyer.
General pointers for employers: the purpose, informing employees and where not to film.
Read →What video analytics measures, which cameras it works on, what it costs and how accurate it is.
Read →Infrared beam, 3D sensor or your existing cameras: what each one measures and what it costs.
Read →How many come in, how many are served at the counter and how long they wait. Real installations in pharmacies in Moldova.
Read →On August 23, 2026, two years after its publication in the Official Gazette (Monitorul Oficial) No. 367-369, Article 574, of August 23, 2024. Until that date, Law No. 133/2011, which it replaces, applied.
Essentially, yes: it transposes EU Regulation 2016/679, known as the GDPR. The official text is on legis.md, and the recommendations for companies are on datepersonale.md.
No. Law No. 195/2024 has no article or chapter dedicated to cameras. Video surveillance falls under the general rules: it needs a legal basis, informing the people concerned, a set storage period and security measures. Don’t look for a special text, because there isn’t one.
The National Center for Personal Data Protection. On datepersonale.md you will find the text of the law, recommendations for controllers and the Center’s contact details.
No. We are a video analytics company, not a legal consultancy. The privacy notice, the record of processing and the other documents are prepared by a lawyer or a data protection specialist. We tell you what can be measured on your cameras without identifying customers.
We don’t give legal advice. But we can tell you what can be measured on your cameras without entering the heavy regime of individual monitoring, and we reply within 24 hours, in writing.