Law on Personal Data, publicly available personal data
In force since .
A personal data rule binding public and private bodies.
- Audit expectation
- none
What it requires
- An app scraping personal data from a publicly accessible Uzbek source must still meet the Law on Personal Data's general lawful-basis and consent requirements unless the data qualifies as publicly available personal data under Art. 29, meaning data the subject has made freely accessible or that is not subject to a confidentiality requirement.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
What it makes you log
Logging duty
Article 29 defines publicly available personal data, lets publicly accessible sources of personal data (directories, address books, public electronic information resources) be created to inform the population, limits what such a source may carry with the subject's written consent, and lets the subject's data be removed from such a source on his appeal or by decision of the authorized body or court. It imposes no duty to create, keep, produce or review a log or record. The Act's scope article and the operator duties in other chapters are not cited by the row and none is borrowed, so no hook is recorded.
- Kind
- None
- As of
What this law does
Article 29 of the Law on Personal Data defines publicly available personal data as data access to which is free with the subject's consent or which is not subject to a confidentiality requirement.
The Act's general consent and lawful-basis duties, read elsewhere in the Act, are not stated to turn on how the operator collected the data, so a public Uzbek source's data reached by crawling or scraping falls within the same regime as data collected by any other means, unless it independently qualifies as publicly available personal data under Art. 29.
When LexLint raises it
When your app profile says your app crawls the web or trains models.
Back to the example · Lint your app
Page updated .