Duty LXD-5040
Sends commercial email, in Uzbekistan
Law on Informatization, information security duty for information resource and system ownerssince 2 lines
Law No. 560-II () "On Informatization," Arts. 19-20 · Read the law's page
- Where your information resources or systems contain state secrets or confidential information (which includes personal data of individuals), you must protect them under the procedure the Cabinet of Ministers sets for that category.
- For any other information resource or system, you set your own protection procedure; the statute states no external minimum standard for it.
Law on Cybersecurity, cybersecurity incident notification dutysince 3 lines
Law No. O'RQ-764 () "On Cybersecurity," Arts. 3, 16, 22-24 · Read the law's page
- Notify the State Security Service of cybersecurity incidents and cybercrimes that have occurred affecting your information systems or resources; the statute sets no numeric deadline or severity threshold.
- Take steps to prevent the loss of digital evidence needed to fully investigate the incident, and keep the records needed to analyze it.
- If you investigate the incident yourself because you hold the resources and technical means to do so, report the results to the State Security Service.
Law on Cybersecurity, general cybersecurity duties on cybersecurity subjectssince 4 lines
Law No. O'RQ-764 () "On Cybersecurity," Arts. 3, 16, 37 · Read the law's page
- Applies to any legal entity or individual entrepreneur that owns, uses, or disposes of national information resources, or that provides electronic information services using them.
- Prevent unlawful disclosure, theft, loss, corruption, blocking, or falsification of data in your information systems and resources, and act promptly when such a case is detected.
- Comply with the cybersecurity requirements the State Security Service sets for protecting information systems and resources.
- Maintain a functioning capability to respond to cybersecurity incidents, or use an outsourced provider with the State Security Service's authorization if you have none of your own.