Cyber Law at Antigua and Barbuda
Armenia has developed a comprehensive legal framework to address cyber law, data protection, and cybersecurity, aligning with international standards and emphasizing individual rights and organizational responsibilities.
Legal Framework
The cornerstone of Armenia's data protection legislation is the Law on Personal Data Protection, enacted in 2021. This law establishes the rights of individuals regarding their personal data and imposes obligations on data controllers and processors. Key provisions include:
Consent Requirement: Data processing must be based on explicit, informed consent from individuals.
Data Protection Impact Assessments (DPIAs): Mandatory when processing activities pose high risks to individuals' rights and freedoms.
Security Measures: Obligation to implement appropriate technical and organizational measures to protect personal data.
Cross-Border Data Transfers: Transfers to countries without adequate data protection require authorization and must include safeguards like standard contractual clauses.
Armenia is also a signatory to Convention 108+, the modernized Council of Europe treaty on data protection, which it ratified in January 2022. This commitment underscores Armenia's dedication to upholding international data protection standards.
Cybersecurity Legislation
The Law on Information and Information Protection, enacted in 2004, provides the foundational principles for protecting information, ensuring its confidentiality, integrity, and availability. This legislation is crucial for addressing cybersecurity threats and incidents, enabling both public and private entities to adopt necessary protective measures.
Additionally, a draft Cybersecurity Law has been submitted for public discussion. This proposed legislation aims to establish a comprehensive legal framework to safeguard cybersecurity and address cybercrime effectively. It includes measures to ensure the functioning of information systems and critical infrastructures, data integrity, privacy settings, and procedures for reporting and resolving cyber incidents.
Enforcement and Penalties
The Personal Data Protection Agency, under the Ministry of Justice, is the primary authority overseeing data protection compliance in Armenia. It is empowered to investigate violations and impose penalties for non-compliance with data protection laws. Penalties can range from fines to more severe sanctions, depending on the nature and severity of the violation.
In summary, Armenia has established a robust legal framework for cyber law, emphasizing data protection, cybersecurity, and compliance with international standards. Organizations operating in Armenia must adhere to these regulations to ensure the protection of personal data and maintain cybersecurity.
RELATED Blog
0 comments