respect to information protection:
24.1.1. Monitor the compliance of the laws on personal data protection, raise public
awareness and organize advocacy activities, submit requirements and recommendations to relevant
organizations, and comment on relevant procedures.
24.1.2. Receive, investigate, and resolve complaints and reports, if it is considered that
human rights and freedoms protected by this Law have been violated or potentially violated in the course
of the data collection, processing, use and protection or investigate and resolve on its own initiative and
submit requirements and recommendations to the relevant authorities on the respective matter.
24.1.3.Provide directions and recommendations to relevant organizations regarding
collection, processing, use and protection of personal sensitive data.
24.1.4.Receive and review reports submitted by the data controller on violations
identified in the data collection, processing and use and measures taken to eliminate its negative
consequences and make recommendations on further considerations.
24.1.5.Make recommendations for the purpose of preventing violations of human rights
and freedoms in in the data collection, processing and use with electronic processing technology in
accordance with Article 23 of this Law.
24.1.6. Specify data protection activities, violations, and compliance with data subject's
rights in the report on the situation of human rights and freedoms in Mongolia.
24.2. One member of the National Human Rights Commission shall be specifically responsible for
the functions specified in Paragraph 24.1 of this Law.
Article 25. Full Power of the State Central Administrative Body in charge of Digital Development
and Communication Regarding Data Protection in the Digital Environment
25.1. The state central administrative body in charge of digital development and communication
shall exercise the following full powers for the data protection in the digital environment:
25.1.1. Ensure the implementation of the laws on personal data protection, raise public
awareness, and organize advocacy activities, cooperate with relevant organizations, and provide
professional and methodological assistance.
25.1.2. Approve technological security requirements and procedures for processing
sensitive personal data, genetic and biometric data.
25.1.3. Receive and register the data subject's report of security failures of information
system intended for data collection, processing and use, occurrence of cyber-attacks, and immediately
take necessary measures.
Article 26. Full Power of Other State Authorities for Information Protection
26.1. The state authority shall monitor the data collection, processing and use by the data
controller within the scope of its functions specified in the applicable laws.
Chapter seven
audio, video and audio Video recording system
Article 27. Audio, Video and Audio-Video Recording System
27.1. Audio, video, and audio-video recording equipment consists of fixed and mobile technical
instrument that can collect, transmit, and store audio, video, and audio-video data with technological
assistance.
27.2. Audio, video, and audio-video recording system shall consist of equipment, data
transmission network, storage device and software specified in Paragraph 27.1 of this Law.
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents