of July 2, 2019 No. ZRU-547
About personal data
Accepted by Legislative house on April 16, 2019
Approved by the Senate on June 21, 2019
The purpose of this Law is regulation of the relations in the field of personal data.
The legislation on personal data consists of this Law and other acts of the legislation.
If the international treaty of the Republic of Uzbekistan establishes other rules, than those which are stipulated by the legislation the Republic of Uzbekistan about personal data then are applied rules of the international treaty.
Operation of this Law extends to the relations arising during the processing and personal data protection irrespective of the applied means of processing, including information technologies.
Operation of this Law does not extend to the relations arising in case of:
to personal data processing by physical person in the personal, household purposes and not connected with its professional or business activity;
the forming, storage and use of documents of National Archive Fund and other archive documents containing personal data;
to personal data processing, carried to the data constituting the state secrets;
to personal data processing, received during operational search, intelligence and counterintelligence activities, fight against crime, protection of law and order, and also within counteraction of legalization of income gained from criminal activities.
In this Law the following basic concepts are applied:
personal data - the information fixed on electronic, paper and (or) other material medium relating to certain physical person or giving the chance of its identification;
the subject of personal data (subject) - physical person to which personal data belong;
base of personal data - the database in the form of information system containing personal data in the structure;
personal data processing - realization of one or sets of actions for collection, systematization, storage, change, amendment, use, provision, distribution, transfer, depersonalization and destruction of personal data;
the operator of base of personal data (operator) - state body, the physical and (or) legal entity performing personal data processing;
the owner of base of personal data (owner) - state body, the physical and (or) legal entity having right of possession, uses and orders of base of personal data;
the third party - any person which is not the subject, the owner and (or) the operator, but related circumstances or the relations on personal data processing.
The basic principles of this Law are:
observance of constitutional rights and freedoms of man and citizen;
legality of the purposes and methods of personal data processing;
accuracy and personal data verification;
confidentiality and security of personal data;
equal rights of subjects, owners and operators;
safety of the personality, society and state.
State regulation in the field of personal data is performed by the Cabinet of Ministers of the Republic of Uzbekistan and authorized state body in the field of personal data.
Cabinet of Ministers of the Republic of Uzbekistan:
provides realization of single state policy in the field of personal data;
approves state programs in the field of personal data;
determines procedure for maintaining the State register of bases of personal data;
approves registration procedure of bases of personal data in the State register of bases of personal data;
coordinates activities of bodies of the public and economic board, public authorities on places in the field of personal data.
The Cabinet of Ministers of the Republic of Uzbekistan based on the data provided by authorized state body in the field of personal data establishes:
levels of security of personal data in case of their processing depending on safety hazards;
requirements for ensuring personal data protection in case of their processing which execution provides the established levels of security of personal data;
requirements to material carriers of biometric and genetic data and technologies of storage of such data out of bases of personal data.
Authorized state body in the field of personal data is the State center of personalisation under the Cabinet of Ministers of the Republic of Uzbekistan (further - authorized state body).
Authorized state body:
realizes state policy in the field of personal data;
participates in development and implementation of the state and other programs in the field of personal data;
approves the Standard procedure for personal data processing;
approves the Standard procedure for the organization of activities of structural division or the authorized person of the owner and (or) operator providing personal data processing and their protection;
keeps the State register of bases of personal data;
Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info
Database include more 38000 documents. You can find needed documents using search system. For effective work you can mix any on documents parameters: country, documents type, date range, teams or tags.
If you cannot find the required document, or you do not know where to begin, go to Help section.
In this section, we’ve tried to describe in detail the features and capabilities of the system, as well as the most effective techniques for working with the database.
You also may open the section Frequently asked questions. This section provides answers to questions set by users.