Law note · Kyrgyzstan
Digital Code, comprehensive personal data regime
What it requires
- An app that collects, uses, or discloses the personal data of individuals in Kyrgyzstan must process it lawfully, fairly, and transparently, limit use to the stated purpose, minimize what is collected, keep it accurate, and limit retention to the processing purpose. An organization with more than ten employees must designate a personal-data-responsible person and provide staff training.
When LexLint raises it
crawls_webtrains_modelsgenerates_contentdeploys_chatbotautomated_outreachhigh_risk_decisionsprocesses_voiceprocesses_biometrics
What we found
Art. 78, read in full, states lawfulness/fairness/transparency, purpose limitation, data minimization, accuracy, and storage-limitation principles in a structure closely tracking General Data Protection Regulation (GDPR) Art. 5. Art. 88, also read in full, requires privacy-by-design measures, an operations log kept per regulator guidance, a personal-data-responsible person for organizations with more than ten employees, and staff training, with the Cabinet of Ministers setting protection-level requirements by regulation.
Art. 77, read in the reviewer pass, confirms the chapter applies to any personal-data processing including within digital records and resources, exempts a natural person's purely personal or family processing, and voids any conflicting or unpublished regulation. Art. 79 (the general processing-grounds list) was not read in either pass.
A reviewer pass confirmed the official government portal, cbd.minjust.gov.kg, is readable through the crawler's stealth rendering tier (81,674 characters via a direct fetch of the Digital Code's own page, matching every provision the research pass took from third-party mirrors), even though the plain HTTP tier the research pass used serves only a client-rendered JavaScript shell; this document's citations are re-sourced to that official page.
Primary source
official government portal
Centralized Bank of Legal Information of the Kyrgyz Republic (cbd.minjust.gov.kg), which serves this page's text only to a rendering tier: a plain HTTP fetch of this same URL returns a 1,961-character JavaScript shell with zero hits for any Chapter 11 term, while the crawler's STEALTH_PLUS rendering tier returns the full 657,172-character document confirmed directly against this URL