Makes employment decisions, in Burundi

Loi n°1/03 du 10 mars 2026, articles 17-18 and 21-33 (droits des personnes concernées) · Read the law's page

• Give a person, at the time you collect personal data directly from them, your identity, the purposes, the recipients, the retention period, their rights, whether the answers are compulsory or optional, and any processing of the data with artificial intelligence for automated decision-making; where you did not collect the data from them, give the same information and the source within one month.
• Obtain the person's consent after informing them before you process their data further for a purpose other than the one for which it was collected.
• Stop using a person's data for prospecting, including commercial, charitable or political prospecting, when they object, without charge and without requiring a reason, and respect a person's objection to processing for legitimate reasons unless you show compelling legitimate grounds.
• Confirm to a person on request whether you process their data and give them access and a free copy, and tell each recipient of any erasure or rectification unless that is impossible or involves disproportionate effort.
• Erase personal data without delay where it is no longer needed, consent is withdrawn and was the only basis, or the processing was unlawful, and rectify inaccurate data without delay.
• Give a person their data in a structured, commonly used, machine-readable format and, where technically possible, transmit it directly to another controller within fifteen calendar days of the request.
• Answer requests for access, rectification, objection and erasure without delay and at the latest one month from receipt, and where you cannot meet that deadline warn the person and notify the data protection body.

Loi n°1/03 du 10 mars 2026, articles 19-20 (décisions automatisées) · Read the law's page

• Tell a person that a decision with legal effects or significant effects on them is automated and explain the underlying logic in clear and simple terms, and where processing only assists a human decision, describe the human decision-maker's own contribution, including the methods and criteria used.
• Take an automated decision with legal effects or significant effects on a person only where legislation or regulation provides for it with appropriate safeguards, the person consents, or it is strictly necessary to conclude or perform a contract with the person, and give individual reasons for it.
• Let the person have the decision reformulated by inviting their written observations and having a human take a new reasoned decision that entirely replaces the first.