Belarus

Moderate

Law on the Protection of Personal Data (2021)

Authority: National Centre for Personal Data Protection | Enforcement: partial | Enacted: November 2021

Overview

Belarus enacted a dedicated data protection law in 2021. The National Centre for Personal Data Protection was established as the supervisory authority. The law covers consent, data subject rights, and cross-border transfers.

14-Topic Coverage

Data Protection Authority

Fully Addressed

National Centre for Personal Data Protection oversees compliance.

Data Subject Rights

Fully Addressed

Rights to access, correction, deletion, and restriction.

Cross-Border Transfer

Fully Addressed

Transfers to countries with adequate protection or with consent.

Breach Notification

Partially Addressed

Provisions exist. Practical implementation developing.

DPO Requirements

Partially Addressed

Must designate responsible person. Notification to authority.

Children's Data

Partially Addressed

Parental consent for children. General provisions apply.

Penalties & Enforcement

Fully Addressed

Administrative fines for violations. Criminal penalties for certain offences.

Sector-Specific Rules

Partially Addressed

NBRB financial data rules, health data provisions.

AI & Automated Decisions

Not Addressed

No specific provisions.

Data Localisation

Partially Addressed

Certain data processing activities may require local storage.

Significant Data Fiduciary

Not Addressed

No equivalent concept.

Government Data

Partially Addressed

Law applies to government with broad national security exemptions.