πŸ‡ΊπŸ‡ΏUzbekistan

UZ-PDPL-ZRU-547

Law on Personal Data, No. ZRU-547

Authorised state body for personal data

Uzbekistan overview

Uzbekistan regulates the full personal-data lifecycle

Law No. ZRU-547 of 2 July 2019 took effect on 1 October 2019. The official LexUZ page is a current consolidated text and records amendments through July 2026. The attached government PDF is the original promulgated law, so current controls were cross-checked against the live consolidated LexUZ text.

What organisations must address

The law covers collection and storage, use and disclosure, cross-border transfer, consent, database registration, automated decisions, special categories, security, confidentiality, localisation, subject rights and owner/operator duties.

What this means for you

Register databases containing the categories that Article 27-1 requires to remain in Uzbekistan, record consent or another condition, implement confidentiality and safeguards, support rights requests, document an approved route for other overseas storage or processing, and destroy data when the statutory grounds arise.