At the end of last year, the government of Uzbekistan adopted amendments to the “Law on Personal Data”, mandating the following:
- personal data of citizens of Uzbekistan to be processed using technical means physically located on the territory of Uzbekistan and listed in the Register of the State Data Protection Authority;
- extend the requirement for data localization to include collection, processing, and storage of personal data.
For companies working in the Uzbekistan market, this may mean infrastructure expenditures and an increase in costs associated with running digital infrastructure in the local environment.
Failing to comply with the new requirements of the personal data protection law may lead to administrative and, in severe cases, to criminal liability.
On top of that, according to draft regulations (that are yet to be adopted) in the case when a company is found guilty of breaching the personal data protection requirements it would get its service blocked by the authorities.
The government authority which is responsible for control over personal data protection in Uzbekistan is yet to release the details of the enforcement procedure, clarify responsibility and clarify other points for the market to better understand the implications of the amended law.
We will follow all further development on the legislative landscape of the Republic of Uzbekistan to bring more updates as the process moves forward.
by Ivan Kurochkin,
Partner at 4H Agency.
For more details please contact me at firstname.lastname@example.org or via messengers/phone at +7 968 713 85 00;
For media inquiries please contact our Head of PR at email@example.com.