The National Cybersecurity Agency (NCA) of Azerbaijan is set to investigate complaints from individuals whose rights have been violated due to the illegal collection, processing, or failure to protect personal data. This mandate is outlined in the agency's charter, which was established by a decree from President Ilham Aliyev.
According to the Operative Information Center-OMM, the NCA is authorized to demand that government bodies, legal entities, and individuals involved in data management rectify any violations of the Law of the Republic of Azerbaijan "On Personal Data."
Furthermore, the agency is tasked with conducting audits to ensure that the collection, processing, and protection of personal data by owners and operators comply with regulatory and technical standards. These audits will be performed based on requests from data owners and operators to verify organizational and technical adherence to legal requirements.
The establishment of the National Cybersecurity Agency reflects Azerbaijan's growing focus on digital sovereignty and the protection of citizens' information in an increasingly digitized economy. As the country expands its e-government services and digital infrastructure, the role of such regulatory bodies becomes critical in mitigating cyber risks and ensuring compliance with international data protection standards.