Last updated on November 8, 2025
No. Belarusian law requires explicit consent for processing biometric data, including facial recognition. Using such technology without informing individuals violates the Law on Personal Data Protection and can lead to administrative or even criminal liability.
The Legal Pulse Behind the Lens
Facial recognition sounds futuristic, but in Belarus, the rules are firmly rooted in the present. The country treats biometric data—your face, fingerprints, iris—as highly sensitive information. Since May 2021, the Law of the Republic of Belarus “On Personal Data Protection” (No. 99-Z) has set the tone: transparency and consent are not optional; they are mandatory.
This law defines biometric data as any information that identifies a person through physiological or biological traits. That includes facial features captured by AI systems. Companies cannot simply install cameras and let algorithms do their magic without telling you. They must inform, explain, and obtain your agreement before processing such data.
Why So Strict?
Belarusian regulators see personal data as a cornerstone of privacy and security. In an era where technology races ahead, the law acts as a brake to prevent misuse. The National Center for Personal Data Protection, created under Presidential Decree No. 422, monitors compliance and educates businesses on lawful practices. The message is clear: innovation is welcome, but not at the expense of individual rights.
The cultural backdrop matters too. Belarus, like many European jurisdictions, aligns its principles with global privacy trends. Think of the EU’s GDPR—Belarusian law echoes similar safeguards, emphasizing informed consent and purpose limitation. This approach reflects a societal expectation: people want control over their digital identity, not surprises hidden in fine print.
What Happens If Companies Ignore the Rules?
The consequences are more than a slap on the wrist. Violations can trigger administrative penalties under the Code of Administrative Offenses, and in severe cases, criminal liability. The law empowers authorities to block unlawful processing and demand corrective measures. For businesses, non-compliance risks reputational damage and financial loss—hardly worth the shortcut.
Practical Realities for Businesses
So, what does compliance look like? Before deploying facial recognition AI, companies must:
- Clearly inform individuals about data collection and its purpose.
- Obtain written or electronic consent prior to processing.
- Ensure secure storage and prevent unauthorized access.
These steps are not mere formalities; they are legal obligations. Even tech-driven sectors like retail or banking must follow them. The law applies broadly, covering both public and private entities.
A Glimpse Into the Future
Belarus is not standing still. The government’s digitalization strategy envisions expanding AI use, but always under ethical and legal frameworks. Discussions on refining regulations for emerging technologies, including AI, are ongoing. The goal? Balance innovation with privacy, ensuring that progress does not erode trust.
See more on BELARUS
Sources
Закон Республики Беларусь «О защите персональных данных»
https://www.minfin.gov.by/upload/depcen/acts/zakon_070521_99z.pdf
07.05.2021
Указ Президента Республики Беларусь № 422 «О мерах по совершенствованию защиты персональных данных»
https://mart.gov.by/activity/zashchita-personalnykh-dannykh/
28.10.2021