Law note · Uzbekistan
Law on Personal Data, comprehensive regime and lawful bases
cite Law No. ZRU-547 (2 July 2019), Arts. 1-14, 18-23, 28, 30-31
stage IN FORCE in force since 2019-10-01
kind Comprehensive regime
binds public and private bodies
reviewed 2026-08-29
What it requires
- An app that collects, uses, or discloses the personal data of individuals in Uzbekistan must establish one of the Law's lawful bases, most commonly the subject's consent, before processing.
When LexLint raises it
crawls_webtrains_modelsgenerates_contentdeploys_chatbotautomated_outreachhigh_risk_decisionsprocesses_voiceprocesses_biometrics
What we found
Law No. ZRU-547 reaches the owner, operator, and third party generally, with no public and private carve-out found in the articles read. Processing generally requires the subject's consent (Art. 21 sets the procedure for giving and revoking it), subject to statutory exceptions not read article by article in this pass.