Article 19. Requirements for the processing of personal data

The purposes of processing of personal data are determined by regulatory legal acts, regulations, constituent or other documents regulating the activities of the owner and (or) operator, and must comply with this Law.

The purposes of processing of personal data should correspond to the purposes previously stated during their collection, as well as the rights and obligations of the owner and (or) operator.

In the event of a change in the purpose of processing of personal data, the owner and (or) operator must obtain the consent of the subject to the processing of his data in accordance with the changed purpose.

Personal data must be accurate and reliable, and, if necessary, change and supplement.

The amount of personal data that can be included in the personal data base is determined by the subject in accordance with this Law. The volume and nature of the processed personal data should correspond to the purposes and methods of their processing.

Personal data is processed in a form that allows the identification of the subject or in anonymized form.

The term for processing of personal data should not exceed the period during which the subjectʼs consent to the processing of his personal data is valid.