Uzbekistan approves list of 49 countries meeting personal data protection standards

Uzbekistan has approved a list of 49 countries and territories recognized as providing adequate personal data protection, allowing cross-border data transfers under the country's updated personal data legislation.

2 min read473 views0 comments0

Uzbekistan has approved a list of 49 foreign countries and territories recognized as providing an adequate level of personal data protection, establishing the legal framework for cross-border transfers and processing of personal information.

The list was approved by the Cabinet of Ministers and identifies jurisdictions whose personal data protection standards are considered equivalent to Uzbekistan's requirements. The measure provides the legal basis for transferring and processing personal data outside the country under Uzbekistan's data protection legislation.

The approved list includes 49 countries and territories across Europe, Asia, the Americas, and Oceania. Among them are Austria, Germany, France, Italy, Spain, Japan, the Republic of Korea, Singapore, Canada, Brazil, New Zealand, Russia, and the United Kingdom.

Several territories with special legal status are also included, namely Hong Kong, Jersey, Guernsey, the Isle of Man, and the Faroe Islands.

The United States is subject to a separate condition under the resolution. It is recognized as providing an adequate level of personal data protection only for companies participating in the EU–US Data Privacy Framework.

The approval of the list follows amendments to Uzbekistan's Law on Personal Data signed by President Shavkat Mirziyoyev in March. The amendments allow personal data to be processed and stored outside Uzbekistan, provided that the receiving country offers an adequate level of data protection and other legal requirements are met.

Under the amended legislation, only specific categories of personal data remain subject to mandatory domestic storage requirements. These include biometric and genetic data of individuals, as well as personal data of users of telecommunications operators operating in Uzbekistan.

Other categories of personal data may now be transferred, stored, and processed abroad, provided that the destination country is recognized as ensuring an adequate level of personal data protection and complies with the conditions established under Uzbek law.

Telegram channel@daryo_engSubscribe

What do you think?

Write your comment first. Verify your account when you send it.

Related stories