The framework
Armenia regulates personal data through the Law on Protection of Personal Data, dating from 2015 and supervised by the Personal Data Protection Agency.
For advertisers the consent posture matters most, and Armenia sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Law on Protection of Personal Data
A consent-centric 2015 law enforced by a Ministry of Justice agency; modernization proposals track the GDPR.
Marketing and advertising
Consent-first framework. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers abroad need an adequately protective destination or the individual's consent.
Enforcement and penalties
The authority can impose administrative fines. A ceiling means little until the authority uses it, so its docket is the better guide.