Law note · Uzbekistan
Law on Personal Data, biometric and genetic data
cite Law No. ZRU-547 (2 July 2019), Art. 26
stage IN FORCE in force since 2019-10-01
kind Biometric privacy
binds public and private bodies
reviewed 2026-08-29
What it requires
- An app that processes a faceprint, voiceprint, or other biometric or genetic identifier of an Uzbek data subject for identification purposes must obtain the subject's consent, subject to narrow statutory exceptions for treaty implementation, administration of justice, or enforcement proceedings. Electronic biometric or genetic data stored outside an information system must be kept on media that exclude unauthorized access.
When LexLint raises it
processes_biometricsprocesses_voice
What we found
Art. 26 defines biometric data generally as data characterizing anatomical and physiological characteristics, and genetic data as data from analysis of biological material, with no illustrative list naming face, voice, or fingerprint.
Biometric and genetic data used for identification may be processed only with the subject's consent, except for treaty implementation, administration of justice, or enforcement proceedings, and electronic biometric or genetic data stored outside an information system must be kept on media that exclude unauthorized access. No retention or destruction duty specific to biometric data was found in this article or elsewhere in the Act.