Law On Personal Data

  On October 1, 2019, the Law “On Personal Data” enters into force. The Law regulates all matters relating to the processing and protection of personal data, regardless of the processing means used, including information technology.
Heretofore matters relating to personal data processing in Uzbekistan were not regulated by any domestic legislation.
 According to the new law, “personal data” is defined as any information recorded any media that relates to or makes it possible to identify a specific individual.
 “Processing personal data” is defined as the performance of any actions resulting in the collection, systematization, storing, modification, supplementation, use, distribution, transfer, depersonalization, and destruction of personal data.
 Government control over the processing of personal data is exercised by the Cabinet of Ministers of the Republic of Uzbekistan and the authorized government organ, the State Personalization Center under the Cabinet of Ministers of the Republic.
 The Law on Personal Data also establishes a number of individual rights for the affected individuals and specifies additional obligations for the owners and operators of databases with regard to the obtaining of consent. 
The Law also regulates the procedure for personal database registration in the State Register of Personal Databases and a number of other matters.