Where can people turn in the context of the security incident affecting government electronic services?

In light of the numerous inquiries received from citizens concerned that their personal data may have been affected by the cyberattack on digital public services, we remind them that they have the right to obtain information and clarification about how their data were affected and, where applicable, to exercise the rights guaranteed by Law No. 195/2024. In this context, citizens will be informed about the restoration of services, the security measures taken, the confirmed results of the checks, and how individuals whose data were affected will be notified. At the same time, people who have noticed suspicious access to their personal data or who wish to obtain clarification regarding their possible exposure may contact the institution responsible for administering government electronic services—the Electronic Governance Agency (AGE)—by submitting an electronically signed petition to office@egov.md or a paper petition bearing a handwritten signature. Regarding complaints submitted to the Centre in connection with this incident, it should be noted that their examination and the formulation of a position on the substance of the matters complained of will be possible only after the circumstances have been verified and the relevant investigation into the incident has been completed, with a reasoned decision issued in each case concerning the compliance of personal-data processing operations. Contacting the controller first is important for clarifying the situation, since only the controller holds information about the processing operations through which the data were accessed and the technical and organisational measures applied, and is therefore able to verify whether or not the respective person’s data were affected by the incident. Persons who believe that their rights have been violated through the processing of personal data may bring an action before a court against the controller or the processor.