UzbekistanLaw ZRU-1115, personal data processed using artificial intelligence
Law of the Republic of Uzbekistan ZRU-1115 () Article 2 (Code of Administrative Responsibility, Article 46-2, Part 2) and Article 1(5) (Law on Informatization, Article 12-1)
In force since .
An enforcement supervision rule binding public and private bodies.
As of .
What it requires
- Do not process personal data unlawfully using artificial intelligence technologies, and do not distribute personal data so processed in the media, telecommunications networks or the internet; Uzbekistan makes this an administrative offence under Article 46-2, Part 2 of its Code of Administrative Responsibility.
- If you own a website, a page of a website or another information resource, or are a blogger, do not allow it to be used, where publicly available information is posted on it, for the unlawful processing of personal data using artificial intelligence technologies or for the distribution of such data (Law on Informatization, Article 12-1).
These lines are LexLint's reading of the law's text, as of .
In the frameworks
- NIST Privacy Framework
- CT.PO-P1Policies, processes, and procedures for authorizing data processing (e.g., organizational decisions, individual consent), revoking authorizations, and maintaining authorizations are established and in place.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
What this law does
Law ZRU-1115 of adds a second part to Article 46-2 of the Code of Administrative Responsibility, which makes unlawful processing of personal data using artificial intelligence technologies, and the distribution of such data in the media, telecommunications networks or the internet, an administrative offence. The offence carries a fine of 50 to 100 basic calculated values, with confiscation of the objects of the administrative offence.
Article 12-1 of the Law on Informatization requires a website owner, including a blogger, not to allow a website, page or other information resource on which publicly available information is posted to be used for the purposes it lists. Law ZRU-1115 added to that list the unlawful processing of personal data using artificial intelligence technologies and the distribution of such data in the media, telecommunications networks or the internet.
The Law enters into force on the day of its official publication. The official legislation portal gives as its date of entry into force.
When LexLint raises it
When your app profile says your app crawls the web, trains models, generates content with AI or deploys a chatbot.