Belarus: State Secrets Exemption under the Personal Data Protection Law

The State Secrets Exemption in Belarus' Personal Data Protection Law establishes that the law does not apply to the processing of personal data classified as state secrets, thus limiting the scope of the law where national security is concerned.

Text of Relevant Provisions

PDP Law Art.2(2):

"This Law does not apply to relations relating to cases of processing of personal data: by individuals in the process of exclusively personal, family, home and other similar use, not related to professional or business activities;classified in accordance with the established procedure as state secrets."

Original (Russian):

"Действие настоящего Закона не распространяется на отношения, касающиеся случаев обработки персональных данных: физическими лицами в процессе исключительно личного, семейного, домашнего и иного подобного их использования, не связанного с профессиональной или предпринимательской деятельностью;отнесенных в установленном порядке к государственным секретам."

Analysis of Provisions

• State Secrets Exemption: Article 2(2) of the Personal Data Protection Law in Belarus clearly states that the law does not govern the processing of personal data that is classified as state secrets. This creates a specific exemption where data classified for national security purposes falls outside the general scope of the law.
• Legal Framework: The provision ensures that personal data categorized as state secrets is regulated by separate, specialized legislation rather than the general data protection law. This separation is crucial to maintaining national security while avoiding conflicts or overlaps between different legal regimes.
• Scope and Application: The exemption specifically applies to personal data that has been officially classified as a state secret under Belarusian law. This means that any processing activities involving such data, particularly those conducted by state security agencies or entities working on their behalf, are excluded from the obligations and requirements typically imposed by the Personal Data Protection Law.

Implications

• For Businesses: Companies operating in Belarus that handle personal data classified as state secrets must comply with the relevant security-specific legislation, which may impose stricter requirements than the general data protection law. Understanding the distinction between general personal data and state secrets is essential to ensure compliance.
• Operational Considerations: Entities dealing with state secrets must be aware of the heightened regulatory environment governing such data. This may involve implementing more robust security measures and protocols to meet the legal standards set by national security laws, rather than relying solely on the Personal Data Protection Law.