Law of the Republic of Belarus On Personal Data Protection, rights of the personal data subject

Law No. 99-Z, arts. 10-14 (rights of the personal data subject)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 15 November 2021.

A data subject rights rule binding public and private bodies.

As of 19 September 2026.

What it requires

Let a personal data subject withdraw consent at any time without giving reasons, and within fifteen days of that withdrawal stop processing, erase the data and notify the subject, or, where erasure is not technically possible, restrict further processing and notify the subject instead, under Article 10.
Give a personal data subject, on request and within five working days, information on the processing of their personal data, including your identity, confirmation of processing, the data and its source, and the legal basis and purposes, or explain why you refuse, under Article 11, and rectify personal data that are incomplete, outdated or inaccurate on request.
Give a personal data subject, once a calendar year and free of charge, information about the transmission of their personal data to third parties, under Article 12.
Terminate processing of a personal data subject's personal data, including erasing it, within fifteen days of a demand made in the absence of a legal basis for the processing, or, where erasure is not technically possible, restrict further processing instead, under Article 13.
Require a personal data subject exercising an Article 10 to 13 right to submit a written or electronic application under Article 14, and respond in the same form the application was made unless the subject asks otherwise.

What it reaches

Obligation class

Data subject rights, Disclosure

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 10 lets a personal data subject withdraw consent at any time without giving reasons, and requires the operator, within fifteen days and absent another legal basis, to stop processing, erase the data and notify the subject, or where erasure is not technically possible to restrict further processing and notify the subject instead.

Article 11 gives a personal data subject the right to receive information on the processing of his or her personal data, including the operator's identity, confirmation of processing, the data and its source, and the legal basis and purposes, which the operator must provide within five working days or explain why it is refused, and gives the right to require rectification of personal data that are incomplete, outdated or inaccurate.

Article 12 gives a personal data subject the right to receive, once a calendar year and free of charge, information from the operator about the transmission of his or her personal data to third parties. Article 13 gives a personal data subject the right to demand the free termination of processing, including erasure, absent a legal basis for it, which the operator must carry out within fifteen days, or, where erasure is not technically possible, restrict further processing instead.

Article 14 requires a personal data subject exercising the Articles 10 to 13 rights to submit a written or electronic application to the operator, and requires the operator's response to match the form of that application unless the subject asks otherwise.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach
generates_content

Read the law

National Center for Personal Data Protection's own English pages (cpd.by), read in full (71,842 characters)
corroborated by e-sud.by practitioner guide

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app