Privacy Law at Belarus
Belarus has established a comprehensive legal framework for personal data protection, primarily governed by the Law No. 99-Z of May 7, 2021, titled On Personal Data Protection. This law aims to safeguard individuals' rights and freedoms concerning the processing of their personal data
📜 Key Provisions of the Law
Scope and Applicability:The law applies to personal data processed using automated tools and, in certain cases, non-automated processing if specific criteria are met, It covers both public and private entities within Belarus-
Definition of Personal Data:Personal data encompasses any information related to an identified or identifiable individual Special categories include biometric and genetic data, which are subject to stricter processing conditions
Consent and Processing:Processing personal data generally requires the explicit consent of the data subject, except in cases specified by law The processing must be transparent, limited to legitimate purposes, and proportionate to those purposes
Rights of Data Subjects: Individuals have the right to access, rectify, and erase their personal data, They can also object to processing and request information about data transfers to third parties
Operator Obligations:Data operators must ensure data accuracy, implement protective measures, and notify the authorities of any data breaches within three working days
🛡️ Regulatory Authority
The National Centre for Personal Data Protection was established by Decree No. 422 on October 28, 2021, to oversee compliance with the personal data protection la. The Centre is empowered to verify compliance, issue corrective orders, and demand the termination of data processing when necessary.
The law introduces administrative and criminal liabilities for violations such as unauthorized data processing, infringement of data subjects' rights, and failure to implement required protective measure. Penalties can include fines and other sanctions as stipulated by Belarusian legislation.
🔄 Register of Personal Data Operator
Since December 15, 2023, a Register of Personal Data Operators has been operating in test moe Operators must register if they process sensitive data, engage in cross-border data transfers, or handle large volumes of personal data.
RELATED Blog
0 comments