Duty LXD-6350
Serves under-18s, in Uzbekistan
Law on Informatization, information security duty for information resource and system ownerssince 2 lines
Law No. 560-II () "On Informatization," Arts. 19-20 · Read the law's page
- Where your information resources or systems contain state secrets or confidential information (which includes personal data of individuals), you must protect them under the procedure the Cabinet of Ministers sets for that category.
- For any other information resource or system, you set your own protection procedure; the statute states no external minimum standard for it.
Law on Protection of Children from Harmful Information, age classification and circulation requirementssince 5 lines
Law No. ZRU-444 (), Arts. 4, 17-19 · Read the law's page
- Applies to a producer or distributor of an information product circulated in Uzbekistan, including material distributed using software or placed on the Internet, so an online service reached by children is covered. Works of significant scientific, historical, artistic or other cultural value are outside it.
- Determine the product's age classification before circulation begins in Uzbekistan, with expert help if necessary.
- Classify it into one of five categories marked 0+, 7+, 12+, 16+ or 18+, by its theme, genre, content and artistic design, how a child of the relevant age is likely to perceive it, and the likelihood of harm to a child's health.
- Do not circulate information harmful to children in public places without the administrative, organizational, hardware and software protective measures the Cabinet of Ministers sets.
- Do not distribute information harmful to children in institutions intended for children.
Law on Cybersecurity, cybersecurity incident notification dutysince 3 lines
Law No. O'RQ-764 () "On Cybersecurity," Arts. 3, 16, 22-24 · Read the law's page
- Notify the State Security Service of cybersecurity incidents and cybercrimes that have occurred affecting your information systems or resources; the statute sets no numeric deadline or severity threshold.
- Take steps to prevent the loss of digital evidence needed to fully investigate the incident, and keep the records needed to analyze it.
- If you investigate the incident yourself because you hold the resources and technical means to do so, report the results to the State Security Service.
Law on Cybersecurity, general cybersecurity duties on cybersecurity subjectssince 4 lines
Law No. O'RQ-764 () "On Cybersecurity," Arts. 3, 16, 37 · Read the law's page
- Applies to any legal entity or individual entrepreneur that owns, uses, or disposes of national information resources, or that provides electronic information services using them.
- Prevent unlawful disclosure, theft, loss, corruption, blocking, or falsification of data in your information systems and resources, and act promptly when such a case is detected.
- Comply with the cybersecurity requirements the State Security Service sets for protecting information systems and resources.
- Maintain a functioning capability to respond to cybersecurity incidents, or use an outsourced provider with the State Security Service's authorization if you have none of your own.