Draft Law on the Protection of Privacy and Personal Data, special categories, children and criminal data

Arts. 7-9 Wet Bescherming Privacy en Persoonsgegevens

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

Proposed: draft date not recorded.

A sensitive categories rule binding public and private bodies.

As of 19 September 2026.

What it requires

This measure is a draft bill; it binds nobody yet. What follows is what it would require if it is enacted in this form.
Process a child's personal data based on consent only where the child is at least sixteen, or where a legal representative has consented for a younger child after you take reasonable steps to verify that; never process a child's personal data in a way inconsistent with the child's interest.
Do not process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data about a person's sexual behaviour or orientation, unless a listed exception applies, such as the data subject's explicit consent.
Take particular care when you do process the data listed above, so it does not cause unfair discrimination, prejudice, or other harm to the data subject.
Process personal data about a criminal conviction or offence only under the supervision of an official authority, or where a specific law permits it with appropriate safeguards; keep a comprehensive register of convictions only under such supervision.
If you are not an official authority and you process criminal conviction data for an employment law purpose, keep an internal policy document explaining your procedures for complying with the article 5 principles and your retention and erasure policy for that data, and make it available to the Commissioner on request.

What it reaches

Obligation class

Prohibition, Consent, Biometric, Age verification

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

This measure is a draft bill; it binds nobody yet, and what follows describes what it would require if enacted in the form read. Article 7 sets the age at which a child's own consent to processing is valid at sixteen; below that age, processing based on consent is lawful only where a legal representative gave it, the controller must take reasonable steps to verify that, and a child's personal data may never be processed in a way inconsistent with the child's interest.

Article 8(1) prohibits processing personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and prohibits processing genetic data, biometric data, health data, or data concerning a person's sexual behaviour or orientation, subject to the exceptions article 8(2) lists, such as the data subject's explicit consent or processing necessary to protect vital interests.

Article 8(3) requires particular care in processing that data so it does not cause unfair discrimination, prejudice, or other harm to the data subject. The bill defines biometric data as personal data resulting from specific technical processing of a natural person's physical, physiological or behavioural characteristics that allows or confirms that person's unique identification, expressly including facial images, blood type, fingerprints, DNA analysis, retinal scans, and voice recognition.

Article 9(1) allows processing personal data about a criminal conviction or offence only under the supervision of an official authority, or where a specific law permits it with appropriate safeguards, and reserves a comprehensive register of convictions to supervision by an official authority; article 9(2) lets a controller that is not an official authority process such data for an employment-law purpose only if it keeps an internal policy document, available to the Commissioner on request, explaining its article 5 compliance procedures and its retention and erasure policy for that data.

The bill remains under consideration before De Nationale Assemblee, with no enactment timeline.

When LexLint raises it

processes_biometrics
processes_voice
serves_minors
handles_health_records

Read the law

Draft text of the Ontwerpwet Bescherming Privacy en Persoonsgegevens
as republished by SRiS (Stichting voor de Rechtsorde in Suriname), a Surinamese legal-information foundation, not an official government gazette page the bill's current pendency before De Nationale Assemblee is confirmed on the National Assembly's own list of bills under consideration

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app