🇦🇿Law on Personal Data, No. 998-IIIQ
Law on Personal Data, No. 998-IIIQ
The law governs collection, processing, protection, disclosure and cross-border transfer of personal data. This write-up uses the current official e-Qanun consolidated text.
Core operational duties
Consent and lawful processing: Articles 8-9 place the burden of proving consent on the owner or operator and specify limited alternative conditions.
Notice and rights: Articles 7 and 11-12 require collection information and free access, correction and other request handling, including the statutory response periods.
Security and accountability: Articles 9-10 require lawful and secure processing, contracts for delegated processing and control-audit journals.
Disclosure, transfers and registration: Articles 13-16 regulate third-party disclosure, cross-border transfers and state registration of information systems.
e-Qanun publishes the current consolidation as official HTML. The linked local PDF is a dated text snapshot of that official page and is accompanied by the preserved HTML source.