Processes personal data, in Afghanistan

Constitution of the Islamic Republic of Afghanistan (2004), Arts. 37 and 38 · Read the law's page

• Afghanistan's 2004 Constitution protects communications privacy (Article 37, including a voiceprint or other biometric identifier transmitted over a communications channel) and home inviolability (Article 38, subject to a narrow evident-crime exception requiring a court order after the fact) against state intrusion, but creates no personal-data-processing regime, no data-subject rights, and no supervisory authority for a private-sector app to comply with. United Nations reports describe the Constitution as suspended by the de facto authorities, with no further clarity on the legal framework.