Duty LXD-3770
Makes health care decisions, in Uzbekistan
Law on Informatization, information security duty for information resource and system ownerssince 2 lines
Law No. 560-II () "On Informatization," Arts. 19-20 · Read the law's page
- Where your information resources or systems contain state secrets or confidential information (which includes personal data of individuals), you must protect them under the procedure the Cabinet of Ministers sets for that category.
- For any other information resource or system, you set your own protection procedure; the statute states no external minimum standard for it.
Law on Cybersecurity, cybersecurity incident notification dutysince 3 lines
Law No. O'RQ-764 () "On Cybersecurity," Arts. 3, 16, 22-24 · Read the law's page
- Notify the State Security Service of cybersecurity incidents and cybercrimes that have occurred affecting your information systems or resources; the statute sets no numeric deadline or severity threshold.
- Take steps to prevent the loss of digital evidence needed to fully investigate the incident, and keep the records needed to analyze it.
- If you investigate the incident yourself because you hold the resources and technical means to do so, report the results to the State Security Service.
Law on Cybersecurity, general cybersecurity duties on cybersecurity subjectssince 4 lines
Law No. O'RQ-764 () "On Cybersecurity," Arts. 3, 16, 37 · Read the law's page
- Applies to any legal entity or individual entrepreneur that owns, uses, or disposes of national information resources, or that provides electronic information services using them.
- Prevent unlawful disclosure, theft, loss, corruption, blocking, or falsification of data in your information systems and resources, and act promptly when such a case is detected.
- Comply with the cybersecurity requirements the State Security Service sets for protecting information systems and resources.
- Maintain a functioning capability to respond to cybersecurity incidents, or use an outsourced provider with the State Security Service's authorization if you have none of your own.
Strategy for the Development of Artificial Intelligence Technologies until 2030since 0 lines
Presidential Resolution No. PP-358,
Law on Informatization, use of artificial intelligence in information resources and systemssince 2 lines
Law No. 560-II () "On Informatization," Arts. 3, 7-1, as added by Law No. ZRU-1115 () · Read the law's page
- An app that creates an information resource using artificial intelligence, or operates an information system that functions on artificial-intelligence technology, in Uzbekistan must not let that resource or system harm a person's life, health, freedom, honor, or dignity, or violate their other inalienable rights.
- Where the app's output feeds a legally significant decision affecting a person's rights or freedoms, the decision may not rest exclusively on the AI-based resource's or system's conclusions.
Ethics Rules for creating, deploying and using AI-based solutionssince 5 lines
Order No. 284-mh of the Minister of Digital Technologies of the Republic of Uzbekistan of , registered with the Ministry of Justice on under No. 3787 (Ethics Rules for creating, deploying and using solutions based on artificial intelligence) · Read the law's page
- Do not accept a decision taken by an AI technology or system as the final decision: keep it under human oversight and review and have a person take the final decision.
- Do not rely only on the conclusions of information resources created with AI or of AI-based information systems when taking decisions that bear on a person's rights, freedoms and legitimate interests or decisions in health care.
- Make the algorithms of your AI technology or system transparent and understandable, and prevent possible bias.
- Tell users the rules of use, what the system may and may not be used for, and that AI-based solutions or decisions are not always correct and their results may be used as advice or information only, and write and publish a user guide.
- Give open information on the capabilities, limits and possible risks of your AI technology or system.