Moldova adopted the EU-backed Cybersecurity Law

The newly adopted national cybersecurity law of Moldova was published in the Official Gazette of the Republic of Moldova on May 2nd and will enter into force in Moldova on January 1st, 2025. The national cybersecurity law was drafted with the support of European Union's Moldova cyber security rapid assistance project.

The law aims to increase the cyber resilience of the country’s public sector organizations and critical infrastructure actors. "The adoption of the cybersecurity law is an important step for the Republic of Moldova to improve its resilience to hybrid threats and to create institutions in accordance with the relevant EU provisions. The European Union is glad to see continuous results from the Moldova Cybersecurity Rapid Assistance Project that started last spring," said Jānis Mažeiks, the Ambassador of the European Union to the Republic of Moldova.

According to the law, the competent authority of Moldova designates, based on various criteria, the institutions and service providers that will be required to achieve a necessary level of cybersecurity. These essential service providers will also have to report significant cyber incidents in the future to the Moldovan competent authority.

„Security, including cybersecurity, is a fundamental objective on the Moldovan agenda due to the country’s vulnerable geopolitical position between the European Union and Russia. When developing cybersecurity policy, we took over the best practices from the European Union, which will facilitate regional and international communication and help enhance security and resilience of the Moldova cyber space,” says Dumitru Alaiba, the Moldova’s deputy prime minister and minister of economic development and digitalization.

The law was drafted with the support of Estonian e-Governance Academy`s (eGA) experts, who assisted the Ministry of Economic Development and Digitalization in defining a clear area of responsibility in the management of the country's cybersecurity, developed basic cybersecurity requirements, a cyber incident management and monitoring mechanism, and information exchange platforms.

According to eGA's Senior Cybersecurity Expert Elsa Neeme, the adoption of the law is important because it contributes to the consistent provision of services to the Moldovan people and protection of the country's critical infrastructure from cyberattacks. "The legislative changes achieved jointly with our Moldovan colleagues establish a firm foundation for making the Moldovan cyber space more secure and resilient," said Neeme.

The support to the drafting of the Cybersecurity Law was provided within the European Union funded Moldova Rapid Assistance Project. The project aims to increase the cyber resilience of public sector organisations and key critical infrastructure sectors and align their operations with the European Union Directive on the security of network and information systems (EU NIS Directive). The project’s activities are carried out by the e-Governance Academy from May 2022 to November 2023.

Luciano SCAMBIATO LICCIARDI