March 25, 2022
Registration of personal data databases
2. Legal Basis of Registration of Personal Data Databases in Uzbekistan
3. Regulators in the Sphere of Registration of Personal Data Databases
3.1. Cabinet of Ministers of the Republic of Uzbekistan
3.2. State Personalization Center under the Cabinet of Ministers of the Republic of Uzbekistan
4. The Procedure of Registration
4.2. Procedure of Registration
- The Law of the Republic of Uzbekistan “On Personal Data” dated 02.07.2019 No LRU-547;
- Resolution of the Cabinet of Ministers of the Republic of Uzbekistan dated 08.02.2020 No. 71 “On the Approval of the Regulation on the Procedure for Registering Personal Databases in the State Register of Personal Databases”
2. Legal Basis of Registration of Personal Data Databases in Uzbekistan
According to the Art. 20 of the Law “On Personal Data”, databases of personal data are subject to registration in the State Register of Personal Data Databases. As well as the Resolution of the Cabinet of Ministers No. 71 provides for that databases of personal data must be registered by the owner and (or) operator. Registration of a database is carried out according to the application principle by filing a notification. An application for registration of a database in the State Register of Personal Data Databases is submitted to the State Personalization Center.
Databases containing the following personal data are not subject to registration:
- data relating to participants (members) of a public association or religious organization and processed, respectively, by a public association or religious organization, provided that personal data will not be disseminated or disclosed to third parties;
- data which is made publicly available by the data subject;
- data including only the surname, name and patronymic of the subjects;
- data necessary for the purpose of a single admission of the subject to the territory where the owner and (or) operator is located, or for other similar purposes;
- data included in personal data information systems that have the status of State automated information systems;
- data processed without using automation tools;
- data processed in accordance with labor legislation.
3. Regulators in the Sphere of Registration of Personal Data Databases
3.1. Cabinet of Ministers of the Republic of Uzbekistan
The Cabinet of Ministers of the Republic of Uzbekistan approves the procedure for registering databases of personal data in the State Register of Personal Data Databases.
3.2. State Personalization Center under the Cabinet of Ministers of the Republic of Uzbekistan
The State Personalization Center forms, maintains the State Register of Personal Data Databases and ensures the integrity of data in it. And also a certificate of registration of a personal database in the State Register of Personal Data Databases is issued by the State Personalization Center.
4. The Procedure of Registration
To register a database, the following documents are required:
- Letter of appeal to the State Personalization Center under the Cabinet of Ministers of the Republic of Uzbekistan
- Application
- Copy of the document confirming the head of the organization or the person authorized to sign on behalf of the organization
- Copy of the certificate or license entitling the organization to operate
4.2. Procedure of Registration
To register personal data bases, the owner and (or) operator
- fills in an application form indicating the relevant data on the basis of a sample approved by law;
- submits an application with the necessary documents attached to the State Personalization Center through the information system via the Internet in electronic form or in paper form.
After receiving the application, the State Personalization Center within 15 days
- accepts the submitted application from the owner and (or) operator of the personal data base for registration in the State Register;
- checks if the required information in the application is provided in full;
- makes decisions on registration of the personal data database in the State Register or on refusal to register;
- sends to the applicant:
- a) in case of deciding on the approval of registration in the State Register – Certificate of Registration of the personal data database in the State Register;
- b) in case of making a decision to refuse registration in the State Register – a decision to refuse.
5. The Procedure of Making Amendments and Additions to Personal Data Databases and Excluding Personal Data Databases from the State Register
If it becomes necessary to make amendments and additions to the database in the State Register, the owner and (or) operator, within ten days from the date of these changes, must send a notification electronically through the information system.
The State Personalization Center, in accordance with the notification sent by the owner and (or) operator, within five days from the date of receipt of the notification, makes the appropriate amendments and additions to the previously entered information.
Amendments and additions are made without changing the registration number of the personal data base in the State Register.
The exclusion of a database from the State Register is carried out in the following cases:
- on the basis of an application by the owner and (or) operator to exclude the database from the State Register;
- upon suspension or termination of the activities of the owner and (or) operator;
- upon the expiration of the processing of personal data or the term for their termination;
- on the basis of a court decision to suspend the processing of personal data of the owner and (or) operator.
The owner and (or) operator, upon completion of the processing of personal data through the information system for maintaining the State Register via the World Wide Web, must send an electronic notification to the State Personalization Center within ten days from the date of completion of the processing of personal data.
After the exclusion of the personal data base from the State Register, its registration number is not used in the future, the previously issued Certificate of Registration of the database in the State Register is considered invalid.