Law on the Protection of Personal Data, rights of data subjects

Loi n° 14-029/AU, arts. 10-18, 48 (rights of data subjects)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force.

A data subject rights rule binding public and private bodies.

As of 19 September 2026.

What it requires

Let a data subject object, on legitimate grounds, to the processing of their personal data.
Let a data subject object, free of charge and without needing to state a reason, to their personal data being used for commercial, charitable or political prospecting.
Tell a data subject, when you collect their personal data directly from them, your identity, the processing's purpose, whether answering is mandatory, the recipients, and how to exercise the rights of objection, access and rectification.
Answer an access request with the information in clear language and a copy on payment of no more than the Commission's scale fee, unless the Commission has granted you a response delay or let you disregard a manifestly abusive request.
Correct, complete, update, lock or erase personal data on a data subject's request when it is inaccurate, incomplete, ambiguous, outdated, or unlawfully collected, used, disclosed or retained, and notify any third party the data was disclosed to.
Let access to medical information be exercised only through a physician the data subject designates.
Tell a network communication user, clearly and completely, the purpose of accessing or storing information in their terminal equipment and the means available to object to it, before doing so.

What it reaches

Obligation class

Data subject rights, Disclosure, Access restriction

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 10 gives a data subject the right to object, on legitimate grounds, to processing of their personal data, and article 11 gives them a further right, free of charge and without needing to state a reason, to object to their data being used for commercial, charitable or political prospecting.

Article 12 requires a controller collecting data directly from the data subject to disclose its identity, the processing's purpose, whether answering is mandatory, the recipients, and how the rights of objection, access and rectification are exercised.

Article 13 gives a person the right to ask a body running a listed automated processing whether it holds data concerning them, and article 14 gives the holder of that right of access communication of the information in clear language and a copy on payment of a scale fee the Commission sets, subject to a response delay or the disregard of manifestly abusive requests the Commission may grant.

Article 15 lets a data subject demand correction, completion, updating, locking or erasure of data that is inaccurate, incomplete, ambiguous, outdated, or unlawfully collected, used, disclosed or retained, and requires notice to any third party the data was disclosed to.

Article 16 lets a file be completed or corrected, even on the controller's own initiative, on the Commission's favorable opinion, and article 18 lets access to medical information be exercised only through a physician the data subject designates.

Article 48 requires a controller to tell a network communication user, clearly and completely, the purpose of accessing or storing information in their terminal equipment and the means available to object to it, and requires information under article 14 to be given to a data subject the data was not collected from at the latest by the data's first communication to a third party.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach

Read the law

Text of Loi n° 14-029/AU reproduced by ANADEN (Agence Nationale de Développement du Numérique), the Comorian digital-development agency

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app