Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Belarus: National Data Protection Center established in Belarus

OneTrust DataGuidance confirmed with Klim Stashevsky and Milena Rak, Head of IT & Media and Junior Associate at Arzinger Law Offices respectively, that the Republic of Belarus established, on 28 October 2021, the National Personal Data Protection Center. In particular, Klim and Milena clarified that, the Presidential Edict No. 422 dated 28 October 2021 ('the Edict'), established the Center and specifies its' functions and powers. Moreover, Klim and Milena commented that, "The National Personal Data Protection Center is pronounced an authorised body to protect the rights of personal data subjects. This particularly implies that the Center is entitled to monitor how personal data is processed by operators, address personal data subjects' complaints and take actions to eliminate violations of their rights. The Center will also control the way that operators handle data breach accidents.

Another part of the Center's main functions is a provision of educational services. The Edict obliges organisations to train their employees on personal data protection if the employee's duties include processing of personal data. Thus, operators and authorised officers have to send annual reports to the Center with indication of their employees who are handling personal data. In regard to some employees, trainings are to be provided exclusively by the Center. The Center is designed to become a key state actor in the maintenance of the personal data protection in Belarus. It is mandated to define inter alia the list of 'safe states' in regard to crossborder data transmission and classification of informational systems containing personal data and means of their protection."