Does AI Amendments Law (Informatization Law and Administrative Responsibility Code) require Data Governance?

Uzbekistan • enforcing

Yes — 1 provision

Requirements at a glance

This regulation imposes 3 specific requirements for Data Governance across 1 provision:

Administrative Liability for Unlawful AI Personal Data Processing #

Obligation:
Data Governance
enforcing
Effective:
Jan 21, 2026
Risk tier:
all
Scope:
Any person unlawfully processing personal data using AI technologies, or disseminating such data via mass media, telecommunications networks, or the Internet

Requirements

RequirementDetails
Lawful AI personal data processingProcessing personal data using AI technologies must comply with personal data law; unlawful processing is an administrative offense (Art. 46-2 CAO, new part 2)
No unlawful disseminationDissemination of unlawfully AI-processed personal data via mass media, telecommunications networks, or the Internet is likewise penalized
Website restriction groundUnlawful AI processing of personal data and its online dissemination becomes a ground under Art. 12-1 of the Informatization Law (grounds for restricting access to information resources)

Penalties

ViolationFine
Unlawful processing of personal data using AI technologies, or dissemination via media/telecom/Internet50 to 100 basic calculation units (BRV), with confiscation of the objects of the offense; the Ministry release states this as 50-100x minimum wage, up to 41.2 million soums
View full regulation View obligation Obligation matrix