Awe CheckPersonal data in Belarus: Law No. 99-Z and Article 23.7 fines
What Belarus’s data protection law requires of a site and what a company pays under Article 23.7 of the Administrative Code.
Checked against sources: 30 September 2026
- 2,250 BYNPart 4 maximum for an organization
- 45 BYNbase unit in 2026
- 99-Zthe personal data protection law
What the law requires
- Process personal data with the person’s consent (Article 5 of Law No. 99-Z).
- The operator publishes a processing policy with unrestricted access (Article 17).
- The regulator is the National Center for Personal Data Protection.
Fines under Article 23.7
Amounts are set in base units. From 1 January 2026 a base unit is 45 Belarusian rubles.
- Part 4, failing to apply protection measures: a legal entity 20–50 base units (900–2,250 BYN), a sole trader 10–25, an individual 2–10.
- Part 1, intentional unlawful collection or processing: up to 50 base units (up to 2,250 BYN). The responsible person answers, not the organization.
- Part 3, intentional unlawful distribution of data: up to 200 base units (up to 9,000 BYN).
What a site should do
Publish a policy and link it beside every form, obtain consent with a separate action, and set analytics and advertising cookies only after consent. Awe Check checks all of this and shows the amounts in Belarusian rubles.
Frequently asked
Why does the Belarus check show Part 1 fines for a person and not a company?
Because under the article table Part 1 is applied to individuals and officials, while a legal entity is held liable under Part 4. We say plainly who the fine can fall on.
Does the law apply to a foreign site?
It concerns processing data of people located in Belarus. If you collect such data, following its requirements is the sensible course.
