TurkmenistanLaw on Information About Private Life and Its Protection, proof of consent and detection of unlawful access
Law No. 519-V (), Arts. 24(1)(2), 27(2)(6)
In force since .
A comprehensive regime rule binding public and private bodies.
- Audit expectation
- none
As of .
What it requires
- Be able to present proof that the data subject consented to the collection and processing of the subject's personal data in the cases Turkmen law provides, and take the protection measures needed to detect unlawful access to personal data in good time.
These lines are LexLint's reading of the law's text, as of .
What it makes you log
What the log must hold
Consent or opt-out state
Logging duty
Article 27(2)(6) puts on the operator the duty to present proof of the subject's consent, which cannot be shown without a consent record, and says the burden rests on the operator. The clause names no fields of the record beyond the consent, no retention period and no person to whom the proof goes. Article 24(1)(2) requires protection measures that ensure the timely detection of unlawful access; it is a security measure and states no record, no check on a record and no reporting, so it adds no trigger. Neither article states a territorial test, so the hook is empty.
- Kind
- Implicit
- As of
- Provision
- Law No. 519-V, Art. 27(2)(6)
- Trigger
- consent_or_optout
What this law does
Article 27(2)(6) requires the operator to present proof that the subject consented to the collection and processing of the subject's personal data in the cases the legislation of Turkmenistan provides. The obligation to present that proof, and, for publicly available personal data, the obligation to prove that the data is publicly available, rests on the operator.
Article 24(1)(2) requires the operator and any third party to take the protection measures that ensure the timely detection of facts of unlawful access to personal data when such access could not be prevented.
When LexLint raises it
When your app profile says your app crawls the web, trains models, generates content with AI, deploys a chatbot, sends automated outreach, makes high-risk automated decisions, processes voice recordings or processes biometric data.