🇰🇬Digital Code No. 178 of 2025
Digital Code No. 178 of 2025
The Code regulates processing across the digital environment. Chapter 11, Articles 77-90, is the core personal-data regime, supplemented by the general transparency, rights, resilience and risk rules.
Core operational duties
Principles and legal bases: Articles 78-81 require lawful, fair, transparent, purpose-limited and secure processing, valid consent or another basis, and heightened rules for special categories and children.
Risk and rights: Articles 73-76 and 82-85 cover information, access, correction, portability, DPIAs, deletion, objection and restriction.
Processors and security: Articles 86-88 require complete processor terms, responsibility allocations, technical and organisational protection, a responsible person for qualifying organisations and training.
Incidents and transfers: Article 63 requires regulator notice within 72 hours and processor notice within 48 hours; Article 89 establishes adequacy and exception routes for cross-border transfers.
The Kyrgyz regulator publishes the current Code as official consolidated HTML. The linked PDF is a dated text snapshot of that official page, with the HTML preserved beside it.