RESOLUTION OF THE CABINET OF MINISTERS OF THE KYRGYZ REPUBLIC

of November 18, 2022 No. 638

About approval of Registration procedure of holders (owners) of arrays of personal data, arrays of personal data and lists of personal data in the Register of holders (owners) of arrays of personal data, and also its maintaining and publication

According to Articles 18, 30 Laws of the Kyrgyz Republic "About information of personal nature", articles 13, of the 17th constitutional Law of the Kyrgyz Republic "About the Cabinet of Ministers of the Kyrgyz Republic" the Cabinet of Ministers of the Kyrgyz Republic decides:

1. Approve Registration procedure of holders (owners) of arrays of personal data, arrays of personal data and lists of personal data in the Register of holders (owners) of arrays of personal data, and also its maintaining and publication according to appendix.

2. The organizations which started collection, processing and personal data storage before adoption of this resolution need to undergo accounting registration in the Register of holders (owners) of arrays of personal data within six months from the date of the introduction of this resolution in force.

3. To impose control of execution of this resolution on management of control of execution of decisions of the President and the Presidential Administration Cabinet of Ministers of the Kyrgyz Republic.

4. This resolution becomes effective after seven days from the date of official publication.

Appendix

to the Resolution of the Cabinet of Ministers of the Kyrgyz Republic of November 18, 2022 No. 638

Registration procedure of holders (owners) of arrays of personal data, arrays of personal data and lists of personal data in the Register of holders (owners) of arrays of personal data, and also its maintaining and publication

1. General provisions

1. This Procedure determines the procedure of registration of holders (owners) of arrays of personal data, arrays of personal data and lists of personal data in the Register of holders (owners) of arrays of personal data, and also maintaining and publication.

2. The purposes and tasks of this Procedure are:

- protection of the rights and personal freedoms when using information of personal nature and protection of this information;

- accounting of holders (owners) of arrays of personal data;

- accounting of arrays of personal data;

- creation of conditions of transparency in processes of collection, processing and personal data storage;

- establishment of control of arrays of personal data;

- establishment of operating procedure with information of personal nature;

- ensuring collection of personal data for precisely and in advance certain, announced and legal purposes and non-use in contradiction with these purposes.

3. The holder (owner) of array of personal data (further - the holder) prior to collection and personal data processing carries out the analysis of the tasks performed by it regarding use of personal data and is registered by authorized body on personal data.

4. The purposes shall be unambiguous, legal and correspond to the tasks performed by the holder.

5. The register of holders (owners) of arrays of personal data (further - the Register) represents single system of the state accounting of holders and arrays of personal data, and also lists of the personal data included in these or those arrays of personal data.

6. The register has public character.

7. Access to the Register is provided by means of the Internet in view of what additional publication is not required.

8. In the Register are subject to inclusion:

- name of array of personal data;

- the name and details of the holder who is carrying out work with array of personal data (the address, pattern of ownership, subordination, phone, surname, name, the head's middle name, e-mail, the fax);

- purposes and methods of collection and use of personal data;

- modes and terms of their storage;

- the list of the collected personal data;

- categories or groups of subjects of personal data;

- sources of collection of personal data;

- procedure for informing subjects on collection and possible transfer of their personal data;

- measures for ensuring safety and confidentiality of personal data;

- person directly responsible for work with personal data;

- receivers or categories of receivers to which data can be transferred;

- expected cross-border transfer of personal data.

In the Register arrays of personal data the containing data carried to the state secret based on the Law of the Kyrgyz Republic "About protection of the state secrets of the Kyrgyz Republic" are not subject to inclusion.

9. Maintaining the Register is performed by authorized state body on personal data electronically in the state and official languages.

10. Registration in the Register is performed by holders independently according to this Procedure.

11. Registration of holders in the Register is performed from the moment of submission of the request for consideration of authorized state body completed electronically on personal data.

12. In case of introduction of incomplete or unreliable information the holder shall eliminate the inaccuracies revealed by authorized state body on personal data.

13. Correspondence concerning maintaining the Register between authorized state body on personal data and holders is conducted with use of electronic document management, e-mail and on paper.

14. Registration in the Register is performed on free basis by means of the Internet through the official site of authorized state body on personal data (in the Section "Register").

2. Registration procedure in the Register of holders (owners) of arrays of personal data

15. Registration in the Register consists of three stages. During the first two stages the holder fills electronic forms for receipt of registration number in the Register. During the third stage the holder undergoes reconciliation procedure and registration of lists of personal data for implementation of their collection, processing and storage within realization of the functions and the purposes.

16. Registration of holders in the Register is performed after authorization in the Register by means of the Single system of identification through the cloudy digital signature of the legal entity.

17. Registration of holders and arrays of personal data in the Register is performed in the following form:

1) registration of the holder and array of personal data, and also modification of the Register, are performed on the official site of authorized state body on personal data;

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info