ArmeniaLaw on Protection of Personal Data, data subject rights
Law of the Republic of Armenia on Protection of Personal Data, Law No. HO-49-N, Arts. 15-17
In force since .
A data subject rights rule binding public and private bodies.
- Audit expectation
- none
What it requires
- An app holding the personal data of a person in Armenia must give that person a way to receive information about their own data, to have it corrected, blocked or destroyed in the cases Art. 15(2) lists, and to appeal a processor's action or inaction under Art. 17.
These lines are LexLint's reading of the law's text.
Who enforces it
Settledness
- As of
- Open questions
- Are the "հինգ օրվա ընթացքում" ("within five days") in Article 20(1), within which a processor must answer a data subject's written request under Article 15, calendar days or working days, given that Article 20(2) says "երեք աշխատանքային օրվա ընթացքում" ("within three working days")?
- Does Article 16(1), which bars decisions not derived from the purposes of processing that produce "իրավական հետևանքներ" ("legal consequences") for the data subject, apply to a decision produced by an automated system, although the Article does not mention automated processing?
What it makes you log
Logging duty
Articles 15 to 17 give the data subject the right to information about their data, to see it and to have it corrected, blocked or destroyed, a limit on decisions that affect the subject, and a right to appeal to the authorized body or a court. They require no log or record; the information is supplied on the data subject's written request under Article 15(5).
- Kind
- None
- As of
What this law does
Art. 15 gives a data subject the right to obtain information about their own data, to see it, and to require the processor to correct, block or destroy it where it is incomplete, inaccurate, outdated, unlawfully obtained or unnecessary for the purposes of processing (Art. 15(2)).
Art. 16 bars decisions that do not follow from the purposes of processing and that produce legal consequences for the data subject or otherwise affect the data subject's rights and legitimate interests, unless the data subject consents or a law provides for them (Art. 16(2)); its text does not mention automated processing. Art. 17 gives a right to appeal a processor's action or inaction to the Authorized Body or a court.
The Act has no data-portability provision, and its general duty in Art. 19(1) to destroy or block data no longer needed for the lawful purpose operates alongside the Art. 15(2) right.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .