The Insider’s View: Personal data protection in Uzbekistan
4H Agency CEO and senior partner Ilya Machavariani and partner Ivan Kurochkin look at the personal data law in Uzbekistan and the potential penalties for those who fail to adhere to the rules
- personal data of citizens of Uzbekistan to be processed using technical means physically located on the territory of Uzbekistan and listed in the Register of the State Data Protection Authority (data localisation);
- the requirement for data localisation to apply to data processing using information technologies, including via the internet;
- to lay the responsibility for compliance on the owner or operator of the database. The owner is an entity that owns the database containing the personal data whereas operator is an entity that, in some way, processes the personal data (gambling operators may fall under each category depending on the way they store and manage the personal data);
- extend the requirement for data localisation to include collection, processing and storage of personal data.