On June 2, 2019, the Law on Personal Data (the
"Law") has been adopted. Unofficial
English version of the Law can be found at:
https://kostalegal.com/publications/law-of-the-republic-of-uzbekistan-on-personal-data.
The Law shall come into force on October 1, 2019. It means that, by
that date, all organizations have to change the way they capture,
use and share personal data – both internally and externally
– regardless their size or structure. The issues concerning
the cross - border transfers of personal data are also covered by
the Law. Thus, it shall apply to all Uzbekistan-based companies,
irrespective of whether personal data is processed inside or
outside of the Uzbekistan. This review aims to clearly map the
obligations of the private-sector organizations when processing
personal data and list practical implications of the Law.
