MongoliaLaw on Protection of Personal Data, data subject rights
Law on Protection of Personal Data (17 December 2021), Art. 16; Art. 15
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 1 May 2022.
A data subject rights rule binding public and private bodies.
As of 29 August 2026.
What it requires
- An app must let a Mongolian data subject know whether their data is collected or processed, correct errors, request deletion, obtain and transfer a copy of their own data to a controller of their choosing, and object to and demand reprocessing of a decision made through data processing without human involvement.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Art. 16, read in full, is the richest rights list in this batch: consent to or refuse collection and transfer, know whether one's data has been collected or processed, know third-party recipients, correct errors, request deletion, demand enforcement of a legal prohibition on collection, obtain a copy of one's own data, transmit that copy to a controller of one's own choosing (a genuine data-portability right), withdraw from an ongoing processing activity, and object to and demand reprocessing of a decision resulting from data processing.
Art. 16.2 separately gives the subject a right to have unlawful material or moral damage remedied. Art. 15 sets the general deletion grounds: unlawfully collected data, court or treaty-ordered deletion, purpose achieved, or another statutory ground.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbot
Read the law
official text, legalinfo.mn, Mongolia's official legal-information portal
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.