Art. 1 — Personal data collected by any government institution of the Principality of Seridovia shall be used exclusively for the purposes for which it was collected and for no other purpose without the explicit consent of the data subject.

Art. 2 — The government shall collect only the minimum personal data necessary to deliver the services requested by the citizen.

Art. 3 — Every citizen has the right to: (a) know what personal data is held about them; (b) request correction of inaccurate data; (c) request deletion of their data subject to legal retention requirements; (d) withdraw consent for optional data processing.

Art. 4 — Personal data shall be stored securely using appropriate technical measures. Access to personal data is restricted to authorised government officials with a legitimate need.

Art. 5 — The government shall not sell, share, or transfer personal data to third parties except as required by law or with the explicit consent of the data subject.

Art. 6 — The Ministry of Innovation is responsible for ensuring compliance with this law across all government digital systems and services.

Art. 7 — Breaches of data security involving citizen personal data shall be documented and, where appropriate, communicated to affected individuals in a timely manner.