Law note · Azerbaijan
Law on Personal Data, comprehensive regime and lawful basis
What it requires
- An app that collects, uses, or discloses the personal data of an individual in Azerbaijan, including a facial image or voiceprint, must have a lawful basis under Art. 9.6, most commonly consent for data in an open category or a legislative basis defining the purpose and method of processing, since Azerbaijan's law reaches biometric data under these same ordinary conditions rather than exempting it.
When LexLint raises it
crawls_webtrains_modelsprocesses_biometricsprocesses_voice
What we found
Azerbaijan's Law on Personal Data, Law No. 998-IIIQ, signed 11 May 2010 and amended at least five times through 2023, is a compact 19-article statute, the shortest in this batch alongside Armenia's. Lawful bases sit at Art. 9.6: consent for data in an open category, a legislative basis defining purpose and method, fully anonymized scientific or statistical research, or vital-interest necessity, a shorter list than several regional peers'.
Art. 9.5's biometric-data enumeration is subject to these same ordinary lawful bases, not a heightened regime; see the dedicated biometric_privacy instrument. This document is sourced to an NATLEX-hosted English translation with visible machine-translation artifacts; an official Azerbaijani-language source should ideally be cross-checked, though the substance read here is internally consistent.