A new law signed by the President of Uzbekistan on March 26 introduces significant amendments to the “On Personal Data” legislation. The updated rules came into force on March 27, 2026, bringing notable changes to how personal data is stored and processed.
Which data must remain stored in Uzbekistan?
According to the revised Article 271, certain categories of personal data must be stored within the country. These include biometric data, genetic data, as well as information about users of telecommunications services provided by operators operating in Uzbekistan.
When is overseas data storage allowed?
Other types of personal data may now be stored and processed outside Uzbekistan, provided that at least one of the following conditions is met:
– the foreign country is recognized as ensuring an adequate level of personal data protection;
– the operator adopts standard contractual clauses or binding corporate rules approved by the authorized state body;
– the operator complies with international standards in personal data management and storage.
Which countries will be permitted?
The list of countries that provide sufficient data protection will be determined by the Cabinet of Ministers of Uzbekistan. This will clearly define where personal data can legally be stored abroad.
Are there any exceptions to the law?
The amendments clarify that the law’s requirements no longer apply only to state secrets, but also extend to information related to defense and national security matters.
Why are these changes important?
Previously, the law required that all personal data of Uzbek citizens be physically stored on servers located within the country. This rule, introduced in 2021, had a significant impact on international digital platforms.
For example, on November 3, 2021, popular platforms such as Telegram, YouTube, Instagram, and Facebook were temporarily blocked in Uzbekistan, causing widespread public reaction. The restrictions were lifted within hours.
What opportunities does the new law create?
In recent years, major global companies had urged Uzbek authorities to revise this requirement. The new amendments are expected to support the adoption of cloud technologies and improve the investment environment.
Experts note that previous restrictions were among the reasons why international payment systems like PayPal, Google Pay, and Apple Pay had not entered the Uzbek market. The new legal framework could change this situation.
This article is based on information from the source.