In brief, with the official sources

Law 195/2024 in brief. What it is and what it means for cameras.

Law No. 195 of July 25, 2024 on the protection of personal data came into force on August 23, 2026 and replaced Law No. 133/2011. It transposes EU Regulation 2016/679, known as the GDPR. Below is a short summary and links to the official sources. We do video analytics, not legal advice: what your company specifically has to do, a lawyer or the National Center for Personal Data Protection will tell you.

This page summarizes the official text of the law and the recommendations of the National Center for Personal Data Protection. It is not legal advice; for your specific situation, ask a lawyer.

In short

Law No. 195/2024

Adopted25 July 2024
In force since23 August 2026
ReplacesLaw No. 133/2011
The authorityNCPDP

A summary, not legal advice.

What changed

A new law, with obligations the old law didn’t have.

The law was published in the Official Gazette (Monitorul Oficial) No. 367-369, Article 574, on August 23, 2024, and entered into force two years after publication. Until then, Law No. 133/2011 applied. The new requirements that matter in practice are records of processing activities, data protection impact assessments (DPIAs), incident notification and the data protection officer.

Who it applies to

Almost any organization.

If you have customers, employees or partners who are individuals, you are already processing personal data. The size of the company does not matter.

What counts as “data”

Camera images too.

A video recording in which a person can be recognized is personal data. Cameras are not an exception to the law.

Who oversees it

The National Center (NCPDP).

The National Center for Personal Data Protection receives complaints, carries out checks and imposes sanctions.

The specific case

What the law means if you have surveillance cameras.

Law No. 195/2024 has no article dedicated to video surveillance. But an image in which a person can be recognised is personal data, so cameras fall under the law’s general rules: purpose, legal basis, informing the people filmed, retention period and security.

For your companyWhat documents you need, what the sign should say and how long to keep footage depends on your company’s situation. For that, ask a lawyer or read the Center’s recommendations on datepersonale.md.

For cameras that film employees, an equally short summary is on the page about video cameras in the workplace.

Where we come in

The same cameras, two different regimes.

Vizor is video analytics on the cameras you already have: it counts how many people come in, where they go, how long they wait at the checkout. What matters here is that you choose which legal regime you fall under, and that choice is reflected in what you have to document.

Light regime

Numbers by zone and hour, with no identities.

By default, the system tracks silhouettes and produces numbers: how many came in, which zones they spent time in, how long the queue lasted. No one is identified, no profile is built and there are no per-person reports. You stay within the general obligations — legal basis, informing people, storage period, security.

Heavy regime

Registered employees, recognized by face.

If you register employees in the system, they are recognized and their paths are linked to their names: hours, zones, time present. This takes you into individual monitoring, with everything it requires: a documented legal basis, a DPIA, informing each employee. A facial template is biometric data.

What we deliver and what we don’tWe deliver the tool and the technical documentation. The role of data controller and the legal liability remain yours — we cannot sign on anyone’s behalf that the processing has a legal basis.

If you don’t want the heavy regime, the answer is simple: leave employees unregistered. The system works the same for counting customers, conversion and queues — identity isn’t needed for any of them.

Sources

The official sources, to start from.

The summary on this page does not replace the text of the law or the Center’s recommendations. For any decision, start from them.

This page was updated on . It is not legal advice; for your specific situation, ask a lawyer.

Frequently asked questions

The questions people ask most often.

When did Law No. 195/2024 enter into force?

On August 23, 2026, two years after its publication in the Official Gazette (Monitorul Oficial) No. 367-369, Article 574, of August 23, 2024. Until that date, Law No. 133/2011, which it replaces, applied.

Is Law 195/2024 Moldova’s GDPR?

Essentially, yes: it transposes EU Regulation 2016/679, known as the GDPR. The official text is on legis.md, and the recommendations for companies are on datepersonale.md.

Does the law say anything specific about video surveillance?

No. Law No. 195/2024 has no article or chapter dedicated to cameras. Video surveillance falls under the general rules: it needs a legal basis, informing the people concerned, a set storage period and security measures. Don’t look for a special text, because there isn’t one.

Who enforces Law 195/2024?

The National Center for Personal Data Protection. On datepersonale.md you will find the text of the law, recommendations for controllers and the Center’s contact details.

Can you prepare the documents the law requires for cameras?

No. We are a video analytics company, not a legal consultancy. The privacy notice, the record of processing and the other documents are prepared by a lawyer or a data protection specialist. We tell you what can be measured on your cameras without identifying customers.

Contact

Have cameras and not sure where to start? Let’s look at it together.

We don’t give legal advice. But we can tell you what can be measured on your cameras without entering the heavy regime of individual monitoring, and we reply within 24 hours, in writing.

How many locations do you have?

We reply within 24 hours, in writing.

We use the data from this form only to answer your request, and we keep it for 12 months. We don’t share it with anyone and we don’t send newsletters. How we process data

What happens next

Three steps, no pressure.

1We reply within 24 hours, in writing, with what can be measured at your location.
2Thirty minutes on a single location: together we look at what your existing cameras cover.
3If it makes sense for you, we propose a pilot on three locations. You can stop it at any time, with no penalty.