What Changes on Websites from August 23 – Law 195/2024

On August 23, 2026, Law No. 195/2024 on the Protection of Personal Data comes into force in Moldova. The new law introduces rules aligned with the European approach to personal data protection and significantly changes the requirements for processing personal data, including on websites.

For website owners, the technical side is particularly important.

What needs to be changed on the website and why is it important?

Websites need to be checked for all the ways user data is collected and processed. First of all, this includes Google Analytics, Meta Pixel, Hotjar, and other analytics and advertising tools:non-essential scripts should not be activated before the appropriate user consent is obtained. At the same time, simply having a cookie banner is not enough — the website must technically respect the user's choice and store information about the consent provided, including the date, text version, and selected categories.

You should also check contact, registration, order, and other formsthat collect personal data. Where consent is required, it must be given separately and consciously by the user: the consent checkbox must not be pre-selected.

Why does this matter? Because once the law comes into force, simply having a privacy policy or cookie banner on the website will not be enough. You need to ensure that consent is properly obtained and recorded at the technical level. If a website continues collecting data before consent is given, or cannot demonstrate when and what the user consented to, this may result in non-compliance with the new requirements and create risks for the website owner.

Check Your Website Yourself

To help avoid sanctions from regulatory authorities, check your website right now using this short checklist:

1. Open the website in incognito mode and do not click the consent banner. Press F12 → Network. If you see requests to Google Analytics, facebook.net, Hotjar, or other services, consent has not yet been given and data may already be being collected.
2. Does the banner have a “Reject” button, and is it the same size as the “Accept” button? If there is only an “Accept” button, the user is not being given a full choice.
3. Check your forms: the consent checkbox should be separate and MUST NOT be pre-selected.
4. Check where consent information is stored: who consented, when, and to what? If this information is not stored anywhere, it may be impossible to prove that consent was obtained.
5. Check your privacy policy: does it specify actual data retention periods and specific data recipients, rather than generic wording copied from another website?

If at least one of these points does not match — we can help you determine what needs to be done.

Ready-Made Solutions for Any Website

If you have a WordPress website, technical adaptation usually takes 2–3 business days, depending on the number of forms, analytics systems, advertising pixels, and other integrations.

We analyze the current state of your website, install and configure the required functionality, then launch and test the solution.

Technical Adaptation Packages

Need to Check Your Website?

If you are not sure whether your website's technical setup meets the new requirements, contact us — we will help you identify what needs to be checked and fixed first.

More information about Law No. 195/2024

The prices indicated are not a public offer. The final cost is determined individually after analyzing the website and its technical infrastructure.

The information in this article is provided for informational purposes only and does not constitute legal advice.