October 4, 2024

Registration of databases containing personal information

1. Legal acts

Law of the Republic of Uzbekistan dated 07.02.2019 No.LRU-547 on Personal Data”;
Resolution of the Cabinet of Ministers of the Republic of Uzbekistan dated 08.02.2020 No. 71 on Approval of the Regulations on the State Register of Personal Data Bases.

2. Registration of databases containing personal information
According to Article 20 of the Law “On Personal Data”, databases containing personal information are subject to registration in the State Register of Personal Data Databases. Such registration is carried out by the owner and (or) the database operator by notifying the Personalization Agency under the Ministry of Justice of the Republic of Uzbekistan.

Databases containing the following personal data are not subject to registration:

data related to participants (members) of a public association or a religious organization and processed accordingly by a public association or a religious organization, provided that personal data will not be distributed or disclosed to third parties;
data made publicly available by the subject;
data that includes only the last name, first name, and surname of the subjects;
data required for a single entry of a subject into the territory where the owner and operator are located, or for other similar purposes;
data included in personal data information systems that have the status of state-automated information systems;
data processed without the use of automation tools;
data processed under labor legislation.

3. Regulators in the field of registration of databases

3.1. Cabinet of Ministers of the Republic of Uzbekistan

The Cabinet of Ministers of the Republic of Uzbekistan approves the procedure for registration of databases in the State Register of Personal Data Databases.

3.2. Personalization Agency under the Ministry of Justice of the Republic of Uzbekistan

The Personalization Agency under the Ministry of Justice of the Republic of Uzbekistan (Agency) maintains the State Register and ensures the integrity of information in it.

The certificate of registration of the database in the State Register of Personal Data Bases is also issued by the Agency.

4. The procedure for registration of databases

To register databases of personal data, the owner and (or) the operator

prepares an application indicating the relevant data based on a sample approved by law;
submits an application to the Agency via the website <pd.gov.uz >in electronic form. The application can be submitted in paper-based form.

After receiving the application, the Agency within 15 days:

accepts the submitted application of the owner and (or) the operator of the database for registration in the State Register;
verifies the availability of the required information in the application in full;
decides on the registration of the database in the State Register or on the refusal of registration;
sends to the applicant:

a) when deciding on registration in the State Register, a Certificate of registration of the personal data database in the State Register of Personal Data Databases;

b) when deciding to refuse registration in the State Register, a refusal decision.

5. The procedure for making changes and additions to the databases and the procedure for excluding the database from the State Register

If it becomes necessary to make changes and additions to the information on registration of the database in the State Register, the owner and (or) the operator must send an electronic notification via the information system of the State Register within ten days from the date of occurrence of these changes and additions.

The Agency, in accordance with the notification sent by the owner and (or) the operator, within five days from the date of receipt of the notification, makes appropriate changes and additions to the previously entered information.

Changes and additions are made without changing the registration number of the database in the State Register.

The exclusion of the database from the State Register is carried out in the following cases:

based on the statement of the owner and (or) the operator on the exclusion of the database from the State Register;
upon suspension or termination of the activities of the owner and/or operator;
upon the occurrence of the period of processing of personal data specified in the application or the period of their termination;
based on a court decision to suspend the processing of personal data of the owner and/or operator.

6. Notification of the exclusion of the personal database from the State Register

Within ten days from the date of completion of the processing of personal data, the owner or operator must send an electronic notification to the Agency about the exclusion of the database from the State Register.

After the exclusion of the database from the State Register, its registration number is no longer used, and the previously issued Certificate of registration of the personal database in the State Register of Personal Data Bases expires.

Registration of databases containing personal information

Related posts