LANES | Client alert
All owners and operators of databases and digital objects containing personal data, as well as third parties carrying out processing. Primarily online stores, services and mobile applications, financial organizations, platform operators, medical organizations, retail chains and any employer maintaining personnel records. Separately, companies using access control systems with fingerprints, facial or voice recognition.
Rules for the collection and processing of personal data have been amended by the Order of the Acting Minister of Artificial Intelligence and Digital Development dated September 17, 2026. The amendments are substantive in nature: biometric data is directly classified as personal data, the localization requirement has been extended from databases to any digital objects, and the data subject has acquired the right to demand the destruction of data collected in violation of the law.
Effective since October 1, 2026.
For further details and to check the status, please contact us. This material is for information only and does not constitute legal advice.
Related alerts
Tell us about your situation — we will work out what changes for you and propose a format of work.
Send a request