President of Uzbekistan Shavkat Mirziyoyev has signed Law No. ZRU-1125 dated March 26, 2026, introducing significant amendments to the country's personal data legislation. The new norms aim to strengthen digital sovereignty while simultaneously creating a legal framework for the entry of global payment systems into the market.

According to the updated law, biometric and genetic data of individuals must now be stored exclusively on servers within Uzbekistan. A similar requirement is introduced for information about users of telecommunications operators operating in the republic.

For all other types of personal data, the possibility of processing and storage outside the country is retained, but under strict compliance with a number of conditions. Transfer of information abroad is permitted only if the foreign state ensures a comparable level of protection for data subjects' rights. Operators may also use state-approved contractual mechanisms or follow international data processing and storage standards recognized by the authorized body.

The adoption of these amendments is the result of lengthy preparatory work, which Shavkat Mirziyoyev mentioned during his visit to the United States. At that time, the head of state emphasized that updating legislation in collaboration with American partners is necessary for launching international systems like Apple Pay and Google Pay in Uzbekistan, as well as for developing a network of startup hubs and digital academies.

The Legislative Chamber and Senate of the Oliy Majlis approved this document in January and February of the current year, respectively. The law comes into force from the moment of its official publication, marking the start of a new phase in regulating digital platforms in the country.

Source: podrobno.uz