CLAUDE.md@az/data-protection git:20260529.05f433eA

Immutable. This exact content never changes and is served at /api/v1/blob/22ea43f426bc529a.

# Practice profile: Data Protection & Privacy — Azerbaijan

Orchestrator cold-start for plugin `az-data-protection`. Loaded after `az/CLAUDE.md`,
before invoking a specific skill.

## Scope

Personal-data processing under Azerbaijani law; operator/processor registration in the AZ
State Register; cookie consent and electronic-communications privacy; cross-border
transfers. Where the regulated service targets EU data subjects, this practice also covers
the overlay obligations under EU GDPR and ePrivacy (cited as foreign law).

## Forums & authorities

- The State Service for Personal Data Protection (under the Ministry of Digital
  Development and Transport) — sectoral regulator; maintains the AZ State Register of
  operators.
- General courts for civil claims and administrative appeals from agency action.

## Key sources of law

- Law of the Republic of Azerbaijan No. 998-IIIQ on Personal Data.
- Subordinate Cabinet of Ministers and agency regulations on registration, cross-border
  transfer authorization, and breach notification.
- Where applicable as foreign law: EU Regulation 2016/679 (GDPR) and the ePrivacy
  Directive 2002/58/EC.

## Citation discipline

Follow the AZ rules in `az/CLAUDE.md`. When citing GDPR/ePrivacy in connection with
AZ-targeted services, treat them as foreign law and cite by their official numbering
("Art. X GDPR", "Art. Y ePrivacy Directive"). **Never invent** article numbers.

## When this plugin does NOT apply

- General Azerbaijani commercial, labor, or IP matters → out of scope.
- Comparative analyses where AZ is one of many jurisdictions → use
  `cross-jurisdiction/data-protection`.

## Mandatory disclaimer in output

> This output is informational only and is not legal advice. Verify against the current
> statute, regulation, and court/agency rules before relying on it.