Armenia. Comprehensive data protection. Act
PDP LawLaw of the Republic of Armenia on Protection of Personal Data (HO-49-N of 18 May 2015)
In force
Partly verified
Medium confidence.In-force date from prior knowledge. Penalty amounts (Code of Administrative Offences) not verified; a GDPR-aligned replacement has been discussed.
§1Summary
- Synopsis
Armenia's data protection law based on Convention 108 and Directive 95/46, regulating consent, data subject rights, transfers and the powers of the Personal Data Protection Agency.
- Key themes
- Unique features
Regulator sits within the Ministry of Justice; violations must be remedied within three working days and leaks from electronic systems must be publicly announced and reported to police and the Agency.
- SaaS relevance
Applies to SaaS providers processing data of people in Armenia.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- Immediate public announcement and report to Police and Agency for leaks from electronic systems
- DPO
- No
- Cross-border transfers
- Adequacy or Agency authorisation
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text arlis.am
- Authority
- Personal Data Protection Agency (Ministry of Justice)
§5Where it applies
- Domestic law of
- Armenia
§6Sources and verification
- Verification
Medium confidence.
Partly verified
Medium confidence.In-force date from prior knowledge. Penalty amounts (Code of Administrative Offences) not verified; a GDPR-aligned replacement has been discussed.