ArmeniaLaw on Protection of Personal Data, enforcement
Law of the Republic of Armenia on Protection of Personal Data, Law No. HO-49-N, Art. 24
In force since .
An enforcement supervision rule binding public and private bodies.
- Private right of action
- Yes
- Obligation class
- Data subject rights, Governance
- Audit expectation
- on_request
- Who audits it
- Regulator
- Where the report goes
- Published
What it requires
- An app processing the personal data of a person in Armenia must be prepared to answer to the Authorized Body for Personal Data Protection's audit and enforcement powers, and to a data subject's Art. 17(2) right to compensation for damage, alongside the Art. 17 appeal right.
These lines are LexLint's reading of the law's text.
Who enforces it
Enforcement body
The authorized body for the protection of personal data under Article 24, which acts in the structure set by a decision of the Government of Armenia
Settledness
- As of
- Open questions
- Which provision of the Armenian legislation on administrative offences makes a breach of this Law punishable, given that Article 24(3)(2) lets the authorized body apply "օրենքով սահմանված վարչական պատասխանատվության միջոցներ" ("administrative liability measures established by law") while the Law itself names no offence or fine?
- Which body is the authorized body under Article 24(1) now that Law HO-447-N of has amended the Article, given that Article 24(1) leaves its structure to a Government decision ("կառավարության որոշմամբ սահմանված կառուցվածքով", "in the structure set by a decision of the Government")?
What it makes you log
Who may demand the log
Regulator
Logging duty
Article 24 sets up the authorized body and lists its powers: it checks compliance on its own initiative or on an application, may inspect the devices and documents used for processing, keeps its own register of processors, and publishes an annual report. Those are powers and duties of the authority, and the Article requires no log or record of a processor. The notification a processor files under Article 23 is outside this row.
- Kind
- None
- As of
What this law does
Art. 24 creates an independent Authorized Body for Personal Data Protection, structured by government resolution, with powers to audit compliance, apply administrative-liability measures established by law, demand suspension or cessation of unlawful processing, demand rectification, blocking, or destruction, block processing following review of a pre-processing notification, maintain a processor registry, inspect devices and documents (other than the state information system and the databases connected to it), apply to court, investigate individual complaints, publish an annual public report, and provide guidance.
Art. 17(2) grants the data subject a right to compensation for damage, in accordance with the procedure established by law; the Act itself states no fine amounts, so no penalty figures are stated. Individual recourse runs through the Art. 17 appeal right to the Authorized Body or the courts, together with the Art. 17(2) compensation right, whose procedure the Act leaves to other law.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .