of July 30, 2026 No. 160
About personal data protection, the crimes processed for the purpose of the prevention and fight against them
The Parliament adopts this organic law.
This law shifts the Directive of the European parliament and Council (EU) 2016/680 about protection of physical persons when processing personal data by competent authorities for the purpose of the prevention, identification, investigation of crimes, carrying out criminal prosecution or execution of punishments and about free circulation of such data, and also about cancellation of the Framework decision of Council 2008/977/JAI, published in the Official magazine of the European Union by L 119 of May 4, 2016, CELEX: 32016L0680.
(1) This law establishes the legal basis for protection of physical persons when processing personal data by competent authorities for the purpose of:
a) preventions of crimes, including preventions of threats to public order and public safety and protection against such threats;
b) identifications or investigations of crimes or implementation of criminal prosecution;
c) considerations of criminal cases;
d) execution of criminal penalties and application of security measures.
(2) the Purpose of this law is ensuring protection of basic rights and freedoms of physical persons, in particular the rights to intimate, family and private life, in connection with processing of the personal data for the purpose of provided by part (1).
(1) Provisions of this law are applied to processing of the personal data by competent authorities for the purpose of provided by part (1) Article 1.
(2) Provisions of this law are applied to the processing of personal data performed fully or partially with use of the automated means and also to processing of the personal data containing in the system of accounting of data or which are subject to inclusion in system of accounting of data performed without use of the automated means.
(3) Provisions of this law are not applied to processing of the personal data carried to the state secret. Processing of such data is performed according to the Law on the state secret No. 245/2008, in that measure in what such processing is homeland security and defense, necessary and proportional for protection.
(1) the concepts Used in this law have the values determined by Article 4 of the Marine life protection act of personal data No. 195/2024.
(2) for the purposes of this law the following concepts are used:
1) competent authority:
a) any body of the public power which competence includes the prevention, identification, investigation of crimes or implementation of criminal prosecution, consideration of criminal cases, execution of criminal penalties or application of security measures, including the prevention of threats to public order and public safety and protection against such threats; or
b) any other subject given the law authority on implementation of public functions for the purpose of the prevention, identification, investigation of crimes or implementation of criminal prosecution, consideration of criminal cases, execution of criminal penalties or application of security measures including the prevention of threats to public order and public safety and protection against such threats;
2) the operator - competent authority which independently or together with other subjects determines the purposes and means of processing of personal data. If the purposes and means of processing of personal data are determined by regulations, the operator or specific criteria of its appointment are provided by the corresponding regulations.
(1) Personal data shall:
a) be processed on legal and fair basis;
b) gather for the certain, accurately designated and legal purposes and not be exposed to processing according to the procedure, incompatible with the specified purposes;
c) be corresponding, relevant and not excessive in relation to the purposes for which they are processed;
d) be exact and if necessary to be updated. Proceeding from the processing purposes, all reasonable measures for ensuring immediate removal or correction of inexact personal data shall be taken;
e) be stored in the form allowing to identify subjects of personal data during the term which is not exceeding the term necessary for goal achievement of processing of the relevant data;
f) be processed according to the procedure, ensuring proper safety of personal data, including protection against unauthorized or illegal processing and against accidental loss, destruction or damage, by acceptance of the adequate technical or organizational measures.
(2) Data processing by the same or other operator in any purposes provided by part (1) Articles 1, if they differ from the purposes for which collection of personal data was performed, it is allowed in that measure, in what:
a) the operator is authorized to perform processing of such personal data for achievement to the answering purpose according to regulations; and
b) such processing is to the necessary and proportional answering purpose according to regulations.
Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info
Database include more 50000 documents. You can find needed documents using search system. For effective work you can mix any on documents parameters: country, documents type, date range, teams or tags.
More about search system
If you cannot find the required document, or you do not know where to begin, go to Help section.
In this section, we’ve tried to describe in detail the features and capabilities of the system, as well as the most effective techniques for working with the database.
You also may open the section Frequently asked questions. This section provides answers to questions set by users.