Law note · Mongolia
Law on Protection of Personal Data, data subject rights
What it requires
- An app must let a Mongolian data subject know whether their data is collected or processed, correct errors, request deletion, obtain and transfer a copy of their own data to a controller of their choosing, and object to and demand reprocessing of a decision made through data processing without human involvement.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbot
What we found
Art. 16, read in full, is the richest rights list in this batch: consent to or refuse collection and transfer, know whether one's data has been collected or processed, know third-party recipients, correct errors, request deletion, demand enforcement of a legal prohibition on collection, obtain a copy of one's own data, transmit that copy to a controller of one's own choosing (a genuine data-portability right), withdraw from an ongoing processing activity, and object to and demand reprocessing of a decision resulting from data processing.
Art. 16.2 separately gives the subject a right to have unlawful material or moral damage remedied. Art. 15 sets the general deletion grounds: unlawfully collected data, court or treaty-ordered deletion, purpose achieved, or another statutory ground.