2 August 2018
The Minister of Communications and Information Technology, Mohammad Javad Azari Jahromi, announced, on 26 July 2018, that the Government had prepared a draft data protection bill (‘the Draft Bill’). The Draft Bill outlines data subject rights, the obligations of controllers and processors, offences and punishment, and provides for the establishment of a supervisory authority, which will be tasked with receiving and processing stakeholder’s complaints regarding personal data.
The purpose of the Draft Bill is to protect the dignity of individuals and introduce the first general data protection law in Iran. When passed, the Draft Bill will apply to natural or legal Iranian persons whose personal data is processed within or outside Iran, and defines ‘personal data’ as data which, alone or together with other data, directly or indirectly, identifies the data subject.
Azari Jahromi also recently expressed an interest in discussing matters with the EU on mutual legal and technical assistance in light of the GDPR
A report by Azari Jahromi indicated that the current regime was inadequate and that legal provisions in relation to cyberspace were virtually non-existent, leaving Iranian citizens’ data vulnerable to misuse. Moreover, Azari Jahromi also recently expressed an interest in discussing matters with the EU on mutual legal and technical assistance in light of the General Data Protection Regulation (Regulation (EU) 2016/679) (‘GDPR’), and suggested a meeting with the European Commission to discuss the implementation of rules similar to the GDPR provisions on accuracy and currentness.
Azari Jahromi stated that he expects a quick review of the Draft Bill by the Parliament and noted that four other laws are also currently being drafted on the matters of e-government, cybercrime, electronic transactions and electronic identification.
Adetokunbo Hussain Junior Privacy Analyst