The framework
Moldova regulates personal data through Law No. 133/2011 on Personal Data Protection, supervised by the NCPDP.
For advertisers the consent posture matters most, and Moldova sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Law No. 133/2011 on Personal Data Protection
Moldova runs a directive-era law from 2011 and is upgrading toward the GDPR as an EU candidate; monitor for the replacement statute.
Marketing and advertising
Consent-first framework modeled on the pre-GDPR EU directive; GDPR alignment advancing under the EU accession track. Most channel decisions here follow from that consent rule.
Cross-border transfers
Transfers abroad need an adequate destination or the authority's authorization.
Enforcement and penalties
The authority can impose administrative fines. A ceiling means little until the authority uses it, so its docket is the better guide.