BhutanInformation, Communications and Media Act of Bhutan 2018, privacy policy disclosures on review and removal, and removal on request
Information, Communications and Media Act of Bhutan 2018, ss.338(3), 340
In force since .
A data subject rights rule binding private bodies.
- Audit expectation
- none
What it requires
- An ICT or media service provider or vendor in Bhutan must include in its privacy policy details on how users or consumers may review and, when necessary, have their information, including a biometric identifier, amended or removed, and must allow the information collected to be removed or withdrawn upon the user's request.
These lines are LexLint's reading of the law's text.
Who enforces it
Settledness
- As of
- Open questions
- Does section 340, under which the information collected "may be removed or withdrawn upon the request of the users", oblige the provider to delete the information, or only to stop using it, and within what time?
- Is the "intended purpose" to which section 340 confines storage and use the purpose stated in the privacy policy that sections 337 and 338 require?
What it makes you log
Logging duty
Section 338(3) requires the privacy policy to describe how users may review and have information amended or removed, and section 340 lets collected information be removed or withdrawn on the user's request. Neither names a log, register or record of those requests to be kept or produced. The cited sections state no territorial scope clause.
- Kind
- None
- As of
What this law does
Section 338(3) requires the privacy policy of an ICT and Media facility or service provider and vendor to include details on how users or consumers may review and, when necessary, have their information amended or removed. Section 340 provides that the information collected may be removed or withdrawn upon the request of the users.
These provisions run specifically against an ICT/Media provider under Chapter 17; no equivalent named right was found running against a general Chapter 21 data handler. No express portability right was found.
When LexLint raises it
When your app profile says your app processes biometric data or processes personal data.
Back to the example · Lint your app
Page updated .