Azerbaijan’s National Cybersecurity Agency says security incidents in state and private information systems have recently led to more large-scale leaks of personal data. The agency, which operates under the Ministry of Digital Development and Transport, has outlined the main causes behind the breaches.
According to a study by the National Cybersecurity Agency (NCA), the leaks of personal data stem mainly from weak protective measures in information systems, delayed software updates and poorly managed access rights.
The agency also pointed to unclear security obligations when working with third-party service providers, weak oversight of such providers and a failure to address identified risks in time as other sources of the problem.
Operators urged to act
The National Cybersecurity Agency has called on holders and operators of personal data to reassess the effectiveness of their existing protection systems and strengthen security in line with the risks identified.
The agency noted that collecting and processing personal data creates a legal obligation to protect it, and that obligation does not disappear when the process is outsourced to a third party. Under the law, violations of these obligations can result in administrative liability.
The National Cybersecurity Agency said it continues to monitor compliance with legal requirements on personal data protection and is taking appropriate steps to address any violations it identifies.
