Law: Law of 7 May 2021 No. 99-Z on Personal Data Protection ('the PDP Law')

Regulator: The Presidential Edict No. 422 dated 28 October 2021 established the National Data Protection Center in Belarus. In addition, general governance in the sphere of information protection is performed by the President of the Republic of Belarus and the Council of Ministers of the Republic of Belarus.

Summary: The PDP Law was passed by the House of Representatives of the National Assembly of the Republic of Belarus on 2 April 2021 and was signed into law by the President on 7 May 2021 before entering into effect on 15 November 2021. Notably, the PDP Law follows many of the same basic principles as the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') and aims to introduce purpose limitation and data minimisation principles, provisions on consent and cross-border transfers, as well as a number of obligations for operators, including data breach and security requirements. In addition to the PDP Law, the Law of 10 November 2008 No. 455-Z on Information, Informatization and Protection of Information (only available in Russian here) ('the Law on Information') provides a regulatory framework on the collection, storage, usage, processing, and transfer of data in Belarus.