🇹🇯Law on Protection of Personal Data, No. 1537
Law on Protection of Personal Data, No. 1537
The complete official Tajik-language PDF from the National Legislation Center was reviewed together with the Ministry of Justice status page and article index.
Core operational duties
Collection and consent: Articles 8 and 11-12 require consent or a narrow statutory exception, specific lawful purposes, minimisation and accuracy.
Confidentiality and storage: Articles 13-14 require confidentiality, necessary-and-sufficient collection, Tajikistan-hosted databases unless approved otherwise, and purpose-linked retention.
Special processing: Articles 17-21 regulate biometric data, transfers, anonymisation, destruction and notice to the subject within three working days after specified transfers.
Rights and safeguards: Articles 22 and 25 require accessible processing information, correction/blocking/destruction routes, three-working-day access and legal, organisational and technical protection.
Article 14 requires the database to be located only in Tajikistan unless the authorised state body agrees otherwise.