According to the Law of the Kyrgyz Republic "On Personal Information", citizens have the right to know what personal data of a citizen is collected, processed, and stored by state, municipal or commercial organizations (owners of personal data arrays), and whether they do it legally.

The right to consent or refuse to provide personal data

According to the Law “On Personal Information”, the subject of personal data (a citizen) independently decides whether to provide anyone with any of his/her personal data, and agrees to their processing freely, consciously and in a form that allows confirming the fact of his/her receipt, except as provided in the article 15 of this Law.

In order to exercise their rights and freedoms, citizens provide data, as well as information about their changes to the relevant state authorities, local governments that have the right to work with personal data within their competence.

Before providing his/her personal data, a person must be acquainted with the holder (owner) of the array of personal data, with the list of data collected, the grounds and purposes for their collection and use, with the possible transfer of personal data to a third party, and also be informed about other possible use of personal data.

In case of refusal a citizen has the right not to indicate the reasons for the refusal to provide his or her data.

Access right

The subject of personal data (a citizen) has the right to know that the holder has personal data relating to him or her and to have access to them. The citizen also has the right to receive from the holder of the array of personal data information regarding the processing of his or her personal data, containing:

a)    confirmation of the fact of processing personal data by the holder of an array of personal data;

b)    legal grounds and purposes of personal data processing

c)    purposes and methods of processing personal data used by the holder (owner) of the array of personal data

d)    name and location of the holder (owner) of the array of personal data, information about persons (with the exception of employees of the holder (owner) who have access to personal data or to whom personal data may be transferred on the basis of an agreement with the holder (owner) of the array of personal data or on the basis of the law;

e)    processed personal data relating to the relevant subject of personal data, the source of their receipt;

f)    terms of processing personal data, including the terms of their storage

g)    the procedure for the exercise by the subject of personal data of their rights provided for by this Law;

h)    information about the performed or proposed cross-border data transfer;

i)    other information provided by this Law and other regulatory legal acts.

At his/her written request, the subject can obtain all information about himself/herself from the holder of the personal data array free of charge, except when the information is provided by the holder on a tangible medium (paper, floppy disk, flash drive, etc.).

Information about the availability of personal data and the personal data themselves must be provided within 7 days after receiving the request of the subject of personal data.

The subject of personal data has the right to get acquainted with documents containing personal information about him.

The right of access may be limited only in cases provided for in Article 15 of the Law of the Kyrgyz Republic “On Personal Information”.

Right to make a change

If there is basis, confirmed by relevant documents, the subject of personal data has the right to demand from the holder of these data to make changes to their personal data. Changes to personal data should be made at the initiative of the subject of personal data, whose personal data will change.

Right to block

If the subject of personal data reveals unreliability of data or disputes the legality of actions in relation to his or her personal data, he/she has the right to demand that the holder (possessor) block this data.

The holder (possessor) is obliged to accept the application of the subject for processing and block his/her personal data from the moment of its receipt for the period of verification of the application.

Right to appeal

If the subject of personal data believes that illegal actions have been committed to his or her personal data, he/she has the right to appeal against these actions in court.

Right to damages and/or compensation for non-pecuniary damage

The subject of personal data has the right to compensation for the damage caused and to compensation for non-pecuniary damage in court.