TajikistanLaw on the Protection of Personal Data, enforcement
Law No. 1537 (), Arts. 6-7, 22, 26
In force since .
An enforcement supervision rule binding public and private bodies.
- Audit expectation
- none
What it requires
- An app processing Tajikistani personal data should confirm which body currently exercises the authorized state body's powers under Arts. 6-7, since the Act itself delegates that designation to a presidential act rather than naming the body.
These lines are LexLint's reading of the law's text.
Who enforces it
Settledness
- As of
- Open questions
- Has the President made the determination that Article 6 provides for ("определение уполномоченного государственного органа по защите персональных данных", "determination of the authorized state body for personal data protection"), and which body now exercises the powers listed in Article 7?
- Which provisions are the "законодательством Республики Таджикистан" ("legislation of the Republic of Tajikistan") under which Article 26 holds persons liable for failing to comply with the Law?
What it makes you log
Logging duty
Article 6 lets the President designate the authorized body, and Article 7 lists its powers: policy, drafting rules, approving the list of necessary data and the protection procedure, hearing complaints and identifying responsible persons. Article 22 lets the subject demand correction, blocking or destruction, and Article 26 makes non-compliance a matter of liability under other legislation. None of these gives the body a power to inspect or demand records, and none requires a controller to keep a log or register, so no audit is coded. The cited articles have no territorial scope clause.
- Kind
- None
- As of
What this law does
Art. 6 gives the President of Tajikistan the power to determine the authorized state body for personal data protection and approve its regulation; the Act does not itself name that body.
Art. 7 gives that still-undesignated body real powers if and when named: implementing state policy, drafting regulations for presidential approval, approving data categories and protection procedures, hearing complaints, and identifying responsible persons and taking measures to hold them liable, with no fine schedule stated. Article 22 lets the subject take the measures that Tajik legislation provides to protect their rights.
Article 26 makes natural and legal persons liable for non-compliance with the Act in accordance with Tajik legislation, and the Act itself sets out no damages claim or fine schedule. Art. 27 provides that the Law is brought into force after its official publication; the Ministry of Justice's own legal acts portal records the document's start of effect as , the same day it was signed.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .