UzbekistanLaw on Personal Data, enforcement
In force since .
An enforcement supervision rule binding public and private bodies.
- Audit expectation
- none
What it requires
- An app processing personal data in Uzbekistan must comply with the legislation on personal data, and a legal entity or individual must carry out the instructions the authorized state body issues to remedy a violation of that legislation.
These lines are LexLint's reading of the law's text. Also read by: Resolution No. 21 of the Plenum of the Supreme Court of the Republic of Uzbekistan, , On the practice of application by courts of the legislation on the protection of personal non-property rights and other intangible benefits (recorded ).
Who enforces it
Settledness
Cabinet Resolution No. 415 of designates the Migration and Personalization Department under the Ministry of Internal Affairs as the authorized state body for its own provisions and makes it responsible for preparing proposals to add foreign states to, or remove them from, the list of states that ensure uniform protection of personal data.
- As of
- Case link
- https://lex.uz/mact/-7901164
- Case citation
- Resolution No. 21 of the Plenum of the Supreme Court of the Republic of Uzbekistan, , On the practice of application by courts of the legislation on the protection of personal non-property rights and other intangible benefits
- Open questions
- Does айбдор шахслар ("guilty persons") in Article 33 reach a legal entity that is the owner or operator, or only the natural persons who committed the violation?
- Which body now exercises the state control and issues the binding instructions that Article 8 gives the Давлат персоналлаштириш маркази ("State Personalization Center"), given that Cabinet Resolution No. 415 of designates the Migration and Personalization Department under the Ministry of Internal Affairs as the authorized state body for its own provisions?
What it makes you log
Logging duty
Article 33 says only that persons guilty of violating the personal data legislation bear liability in the established manner. It names no penalty, no authority, no inspection or production power and no record. It imposes no log or record duty, names no audit and no body entitled to a record. The authorized state body is named in Article 8, outside this row. No territorial clause sits in the cited article.
- Kind
- None
- As of
What this law does
Article 33 provides that persons guilty of violating the legislation on personal data bear liability in the established manner, and it sets no penalty schedule, names no authority and states no private right of action. Article 8 names the authorized state body in the field of personal data: the State Personalization Center under the Cabinet of Ministers of Uzbekistan.
Cabinet of Ministers Resolution No. 415 of designates the Migration and Personalization Department under the Ministry of Internal Affairs as the authorized state body for its own provisions and makes it responsible for preparing proposals to add foreign states to, or remove them from, the list of states that ensure uniform protection of personal data.
Under Article 8 the authorized state body exercises state control, within its powers, over compliance with the legislation on personal data. It issues instructions on remedying violations of that legislation, which are binding on legal entities and individuals. It keeps the State Register of Personal Data Bases. The official legislation portal's note on Article 33 refers to Article 46-2 of the Code of Administrative Responsibility and Article 141-2 of the Criminal Code.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .