Law note · Tajikistan
Law on the Protection of Personal Data, biometric personal data
What it requires
- An app that processes a faceprint, voiceprint, or other biometric identifier of a Tajikistani data subject for identification purposes must obtain the subject's written consent, unless the processing falls within a justice, security, or law-enforcement exception. Confidentiality of biometric data specifically is deferred to other Tajik legislation this research did not identify.
When LexLint raises it
processes_biometricsprocesses_voice
What we found
Art. 17, read in full, requires the subject's written consent to process biometric personal data for identification purposes, except in connection with criminal prosecution, administration of justice, enforcement of judicial acts, or defense, security, counter-terrorism, extremism, corruption, and money-laundering matters.
The Art. 1 definition is general, with no illustrative list naming face, voice, or fingerprint: personal data determining the physiological and biological features of the subject. Art. 11 defers biometric confidentiality specifically to unnamed other Tajik legislation, the same deferral pattern this batch also finds word for word in Kazakhstan's Art. 11(3) and Turkmenistan's Art. 7(7).
This corrects the corpus seed, which carried sensitive_biometric_restriction as false; a dedicated, consent-gated biometric article does exist. Art. 27 provides that the Law is brought into force after its official publication; the Ministry of Justice's own legal acts portal records the document's start of effect as 3 August 2018, the same day it was signed.