Tashkent, Uzbekistan (UzDaily.com) -- Senators approved the Law of the Republic of Uzbekistan “On Personal Data” on 21 June 2019.
It was noted that the protection of personal data today is a very topical issue, and this is connected not only with the lightning-fast development of Internet technologies and globalization as a whole, but also the need to protect citizens' right to privacy. The Law applies to relations arising from the processing and protection of personal data, regardless of the means of processing used, including information technology.
The main principles are the observance of constitutional rights and freedoms of a person and citizen, the legitimacy of the goals and methods of processing personal data, the accuracy and reliability of personal data, the confidentiality and security of personal data, equality of rights of subjects, owners and operators, security of the individual, society and state.
In addition, the law defines the powers of state bodies in this area. Thus, the Cabinet of Ministers ensures the implementation of state policy, approves state programs, determines the procedure for maintaining the State register of personal data databases, coordinates the activities of government agencies, establishes the levels of personal data protection when processing them, the requirements for ensuring their protection, the requirements for tangible carriers of biometrics and genetic data and technologies for storing such data outside personal databases.
The State Personalization Center under the Cabinet of Ministers participates in the development and implementation of government programs, approves the Standard Procedure for Processing Personal Data and Organizing the Activities of a Structural Division or Authorized Person of the Owner and Operator Ensuring the Processing and Protection of Personal Data, maintains the State Register of Personal Data, issues a certificate of registering the database of personal data, carries out state control, makes proposals on the improvement of standards legal basis, determines the necessary level of personal data security, analyzes the scope and content of the data processed, the type of activity, the reality of threats to the security of personal data, and introduces instructions to eliminate violations of the law.
At the same time, the Law establishes personal data protection mechanisms, which envisages the adoption of legal, organizational and technical measures for the protection of personal data, ensuring the implementation of the subject’s right to protection from interference with his / her privacy, integrity and security of personal data, respect for the confidentiality of personal data, prevention of unlawful data processing.
The Law also ensures the confidentiality of personal data, the receipt of the written consent of the subject to the inclusion of his personal data in public sources, as well as the exclusion of personal data of the subject from public sources after its circulation. The law is approved by the senators.