Applicability of the Law on Personal Data Protection in Belarus

The Law on Personal Data Protection (PDP Law) of Belarus establishes a legal framework for the processing of personal data. This commentary addresses the law's material and territorial applicability, based on the text of the law and regulatory context.

Material Applicability Factors

The material scope of the PDP Law is defined by several key factors:

Automated Means Criterion

PDP Law Art.2(1):

"This Law regulates relations related to the protection of personal data during processing carried out by:using automation tools;without the use of automation tools, if this provides search for personal data and (or) access to it according to certain criteria (file cabinets, lists, databases, journals, etc.)."

Original (Russian):

"Настоящий Закон регулирует отношения, связанные с защитой персональных данных при их обработке, осуществляемой:с использованием средств автоматизации;без использования средств автоматизации, если при этом обеспечиваются поиск персональных данных и (или) доступ к ним по определенным критериям (картотеки, списки, базы данных, журналы и другое)."

This criterion ensures that all automated processing of personal data falls under the law's scope. Additionally, it includes manual data processing if it is structured in a way that allows for systematic access or retrieval based on specific criteria.

Filing System Criterion

The law extends its applicability to non-automated processing when such processing involves structured filing systems.

PDP Law Art.2(1):

"without the use of automation tools, if this provides search for personal data and (or) access to it according to certain criteria (file cabinets, lists, databases, journals, etc.)."

This provision ensures that organized manual records are also subject to regulation.

Personal and Domestic Use Exemption

PDP Law Art.2(2):

"This Law does not apply to relations relating to cases of processing of personal data:by individuals in the process of exclusively personal, family, home and other similar use, not related to professional or business activities."*

Original (Russian):

"Действие настоящего Закона не распространяется на отношения, касающиеся случаев обработки персональных данных:физическими лицами в процессе исключительно личного, семейного, домашнего и иного подобного их использования, не связанного с профессиональной или предпринимательской деятельностью."*

This exemption excludes personal data processing conducted by individuals for private purposes unrelated to professional or business activities.

State Secrets Exemption

PDP Law Art.2(2):

"This Law does not apply to relations relating to cases of processing of personal data: [...] classified in accordance with the established procedure as state secrets."

Original (Russian):

"Действие настоящего Закона не распространяется на отношения, касающиеся случаев обработки персональных данных: [...] отнесенных в установленном порядке к государственным секретам."

This exemption excludes personal data classified as state secrets from the law's scope.

Territorial Applicability Factors

The PDP Law does not explicitly define its territorial scope. However:

1. The law applies primarily to entities operating within Belarus.
2. There is no explicit provision extending its applicability extraterritorially to foreign entities processing data related to Belarusian residents.

Regulatory Context

• Unlike the GDPR's clear extraterritorial provisions, Belarusian law lacks explicit language regarding its application outside national borders.
• Foreign businesses are subject to compliance only if they have a physical presence in Belarus or process data within its territory.

Conclusion

The Law on Personal Data Protection in Belarus applies broadly within its material scope but lacks explicit provisions addressing extraterritorial applicability. It covers both automated and structured manual data processing while exempting personal/domestic use and state secrets. Foreign entities are generally outside its scope unless operating within Belarusian jurisdiction.