October 28, 2022
New requirements in the field of personal data protection
On October 5, 2022 the Resolution of the Cabinet of Ministers No. PKM-570 “On approval of some regulatory and legal acts in the field of personal data processing” was adopted. This Resolution approves two regulations in the field of personal data processing:
- a) Regulation on determining the levels of protection of personal data in their processing;
- b) Regulation on requirements for material carriers of biometric and genetic data and technologies for storage of such data outside of databases of personal data.
Regulation on determining the levels of protection of personal data in their processing provides:
- ensuring security of personal data in their processing;
- establishing levels of security of personal data in their processing, depending on security threats;
- requirements for ensuring levels of security of personal data.
Regulation on requirements for material carriers of biometric and genetic data and technologies for storage of such data outside of databases of personal data provides:
- procedures for storing biometric and genetic data on material media, their use and recording;
- requirements to biometric and genetic data storage technologies outside personal data bases.
In addition, the decree assigned the State Personalization Center, together with the Ministry of Internal Affairs to develop a draft legal act to identify the state body authorized to detect violations of the Law on Personal Data, draw up a report on administrative offenses and transfer them to the court for consideration.
This Resolution shall enter into force on January 7, 2023.