Law: Law of Mongolia on Protection of Personal Data (only available in Mongolian here)

Regulator: The National Human Rights Commission of Mongolia and the Ministry of Digital Development and Communications

Summary: On December 17, 2021, the State Great Khural of Mongolia (the Parliament) adopted the Law of Mongolia on Protection of Personal Data (only available in Mongolian here), which entered into effect on May 1, 2022, repealing the Law of Mongolia on Personal Secrets and the Law of Mongolia on Data Transparency and Right to Data. The Law on Protection of Personal Data outlines that the National Human Rights Commission of Mongolia and the Ministry of Digital Development and Communications act as supervisory authorities.

However, other legislation including the Law of Mongolia on Cyber Security, the Law of Mongolia on Electronic Signature, and the Law of Mongolia on Public Information Transparency, also entered into effect at the same time as the Law on Protection of Personal Data on May 1, 2022. Mongolian personal data protection is also regulated by sectoral legislation in the field of health and finance, which provide restrictions on data retention and data transfers. Mongolia is also a signatory to a number of treaties and conventions related to data protection including the EU-Mongolia Framework Agreement, which commits Mongolia to cooperating with the EU to improve its level of data protection to the highest standard.