Handles health records, in Syria

Law No. 12 of 2024, arts. 13-14 (sensitive personal data) · Read the law's page

• Do not process sensitive personal data, including a psychological, mental, physical or genetic health condition or a biometric identifier such as a voiceprint or faceprint, without a license or permit from the Personal Data Protection Authority.
• Obtain the data subject's written and explicit consent before processing their sensitive personal data, unless a legally authorized case applies.
• Obtain the consent of a child's legal guardian before processing a child's personal data, and where a child takes part in a game, competition or other activity that calls for personal data, collect no more than participation requires.
• Follow the information security plans, policies and procedures the Authority sets for protecting sensitive personal data, through your data protection officer and the staff under their supervision.