Duty LXD-1025
Processes personal data, in Tajikistan
Law on the Protection of Personal Data, localization and cross-border transfersince 1 line
Law No. 1537 (), Art. 14; Art. 18 · Read the law's page
- An app storing or processing the personal data of individuals in Tajikistan, including a voiceprint or other biometric identifier, must by default keep the database exclusively inside Tajikistan, unless it has an arrangement agreed with the authorized state body for personal data protection. Transferring that data abroad separately requires the subject's consent, a ratified treaty, statutory necessity, or protection of constitutional rights where consent cannot be obtained.
Law on the Protection of Personal Data, duties of the possessor, operator and third partysince 1 line
Law No. 1537 (), Art. 25 · Read the law's page
- Be able to present evidence that the data subject consented to the collection and processing of the subject's personal data in the cases Tajik law provides, and take the protection measures needed to detect unauthorized access to personal data in good time.
Law on the Protection of Personal Data, data subject rightssince 1 line
Law No. 1537 (), Art. 8; Arts. 19-22 · Read the law's page
- An app must notify a Tajikistani data subject of the personal data collected about them and let them correct inaccurate or misleading data, and must let the subject demand the clarification, blocking or destruction of their data where it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose. An app that transfers a subject's data to a third party must notify the subject within three working days, naming the recipient, the purpose, and the data's source, unless the subject already consented to the transfer.
Law on the Protection of Personal Data, comprehensive regimesince 1 line
Law No. 1537 (), Arts. 1-3, 5, 8-9 · Read the law's page
- An app that collects or processes the personal data of individuals in Tajikistan must obtain the subject's consent, limit processing to a specific, predetermined, lawful purpose, and notify the subject of the data collected about them with a right to correction.
Law on the Protection of Personal Data, enforcementsince 1 line
Law No. 1537 (), Arts. 6-7, 22, 26 · Read the law's page
- An app processing Tajikistani personal data should confirm which body currently exercises the authorized state body's powers under Arts. 6-7, since the Act itself delegates that designation to a presidential act rather than naming the body.