AzerbaijanLaw on Personal Data, purpose limitation, data minimization and retention principles
Arts. 9.1 to 9.4 and 11.1, Law of the Republic of Azerbaijan on Personal Data, Law No. 998-IIIQ
In force since .
A comprehensive regime rule binding public and private bodies.
As of .
What it requires
- Declare the purpose of collecting personal data of a person in Azerbaijan, collect only the data necessary to achieve that purpose, keep the volume and nature of the data you collect and process in line with the declared purpose, and process it only by methods that fit that purpose (Articles 9.1, 9.2 and 11.1).
- Keep personal data accurate and complete, update it when necessary, and destroy it without delay once the purpose of collecting and processing it has been achieved and the need to keep it has ended (Articles 9.3 and 9.4).
These lines are LexLint's reading of the law's text, as of .
What this law does
The purpose of collecting and processing personal data must be clearly declared by the owner or operator, and the collection and processing must correspond to those purposes and to the owner's or operator's material, technical and organizational capabilities. Personal data must be collected only for lawful, predetermined and declared purposes and processed by methods that fit the declared purposes.
The volume and nature of the personal data collected and processed must correspond to the declared purposes and to the powers of the owners. The owner or operator has the right to receive from the subject only the personal data that are necessary to achieve the purposes of processing. Personal data must be accurate and complete and, when necessity arises, updated.
Personal data must be destroyed without delay once the purposes of collecting and processing them have been achieved and the need to keep them has ended.
When LexLint raises it
When your app profile says your app crawls the web, trains models, sends automated outreach, processes biometric data or processes voice recordings.