As per Article 16 of the Law on the Protection of Personal Data and Regulation on Data Controller’s Registry Data Protection Board (Board) is authorized to determine exemption for the registration obligation by taking into account the objective criteria set by the Board such as the nature and quantity of the data processed, or the facts as data is being processed or transferred to third parties by virtue of law.