The 2025 Personal Data Protection Law (effective from January 1, 2026) marks a significant step forward in safeguarding privacy rights and enhancing individuals’ control over their personal data in the digital environment. Accordingly, individuals are granted a range of important rights to manage and protect their personal information.
First, individuals have the right to be informed and to make decisions regarding their personal data. This includes being notified about the collection and processing of their data, as well as the right to give or withhold consent. Notably, such consent must be clear, voluntary, and may be withdrawn at any time.
In addition, the law recognizes data control rights, allowing individuals to access, review, correct, or update their personal data when necessary. In certain cases, individuals also have the right to request deletion of their data or to object to its continued processing.
Moreover, the law establishes robust legal protection mechanisms, enabling individuals to file complaints, initiate lawsuits, and claim compensation if their data rights are infringed.
Overall, the 2025 Personal Data Protection Law places individuals at the center, aiming to foster a transparent, secure, and privacy-respecting digital environment.
