Live · primary-sourcedUzbekistanLast verified 21 Aug 2026 ✓
Jurisdiction dossier
Uzbekistan: AI regulation & deadlines
Uzbekistan became the second Central Asian state to legislate on AI on 21 January 2026 — Kazakhstan's Law No. 230-VIII took effect on 18 January 2026, three days earlier — when Law No. ЎРҚ-1115 wrote artificial intelligence into the 2003 Law on Informatization. New art. 7¹ sets two flat rules with no sector, size or nationality limb: AI-created information resources and AI-based information systems must not damage a person's life, health, freedom, honour, dignity or other inalienable rights, and legally significant decisions affecting rights and freedoms may not rest exclusively on their conclusions — a human-in-the-loop mandate on the decision-maker, not a right the person has to invoke. Art. 7¹ carries no penalty; the only sanction the act created is a new part two of KoAO art. 46², 50–100 BRV plus confiscation, and it bites only where unlawful AI processing of personal data is COUPLED with dissemination in the media, telecom networks or the Internet. Separately, art. 24 of the 2019 Personal Data Law (ЗРУ-547, in force 1 Oct 2019 and never amended) bars solely automated decisions producing legal consequences unless there is written consent, a contract, or a legislative basis, and requires the owner/operator to explain the decision, accept an objection and answer it in writing within ten days. 3 obligations tracked — 3 in force.
◆Binding — Binding sectoralFlagship law: Law on Informatization art. 7¹ (Law ЎРҚ-1115) + Personal Data Law art. 24
Uzbekistan became the second Central Asian state to legislate on AI on 21 January 2026 — Kazakhstan's Law No. 230-VIII took effect on 18 January 2026, three days earlier — when Law No. ЎРҚ-1115 wrote artificial intelligence into the 2003 Law on Informatization. New art. 7¹ sets two flat rules with no sector, size or nationality limb: AI-created information resources and AI-based information systems must not damage a person's life, health, freedom, honour, dignity or other inalienable rights, and legally significant decisions affecting rights and freedoms may not rest exclusively on their conclusions — a human-in-the-loop mandate on the decision-maker, not a right the person has to invoke. Art. 7¹ carries no penalty; the only sanction the act created is a new part two of KoAO art. 46², 50–100 BRV plus confiscation, and it bites only where unlawful AI processing of personal data is COUPLED with dissemination in the media, telecom networks or the Internet. Separately, art. 24 of the 2019 Personal Data Law (ЗРУ-547, in force 1 Oct 2019 and never amended) bars solely automated decisions producing legal consequences unless there is written consent, a contract, or a legislative basis, and requires the owner/operator to explain the decision, accept an objection and answer it in writing within ten days.
Binds Owners and operators of personal data (собственник и (или) оператор) processing personal data under Law ЗРУ-547. Right not to be subject to a decision based solely on automated processing, with three exits, plus duties to explain the decision, accept an objection and answer it within ten days.
Art. 24 of Law No. ЗРУ-547 of 2 July 2019 'On Personal Data'. Date is not derived: art. 36 of the Law states it enters into force on 1 October 2019. Art. 24 is ORIGINAL text — the 01.10.2019 redaction on lex.uz and the current 25.07.2026 redaction are word-for-word identical, so none of the five subsequent amendment rounds touched it. Structure is close to GDPR 22 and, unlike Russia's 152-FZ art. 16 (ru-152fz-art16), it DOES have a contract limb: a solely automated decision affecting the subject's rights and legitimate interests and producing legal consequences is barred unless (a) the subject consented in writing, including by electronic document, (b) the decision is taken in performance of a contract between owner and subject or to fulfil the conditions of a previously concluded contract, or (c) legislation provides for it. Part three then imposes three affirmative duties on the owner/operator — explain how the decision is taken and its possible legal consequences, give the subject the opportunity to object, and explain how the subject may defend their rights — and part four requires the objection to be considered and the outcome notified to the subject in WRITING WITHIN TEN DAYS, a third of Russia's thirty. What the article does not give: no right to disclosure of the logic, and no right to have the decision changed or re-taken by a human. On penalties, no KoAO article names art. 24; art. 46² part one reaches unlawful use of personal data generally (7 BRV for citizens, 50 BRV for officials), and since 21 Jan 2026 part two reaches unlawful AI processing coupled with dissemination (uz-koao-46-2-ai).
Stated maximum penalty — No article names art. 24; KoAO art. 46²(1) reaches unlawful processing generally (7 BRV citizens / 50 BRV officials)
Binds Anyone creating information resources using AI, or operating an information system that runs on AI technologies, in Uzbekistan — and anyone taking a legally significant decision affecting a person's rights and freedoms. Information resources created with AI and information systems running on AI technologies must not harm a person; legally significant decisions affecting rights and freedoms may not rest exclusively on their conclusions.
Art. 7¹ was inserted into the Law 'On Informatization' (No. 560-II of 11 Dec 2003) by Law No. ЎРҚ-1115 of 21 January 2026, an omnibus AI amendment act passed by the Legislative Chamber on 12 Aug 2025 and approved by the Senate on 1 Nov 2025. Art. 4 of ЎРҚ-1115 brings it into force on the day of official publication, and the official Uzbek consolidated text records that publication as National Database of Legislation, 21.01.2026, No. 03/26/1115/0063 — so 21 January 2026 is the in-force date, not a projection. Two duties, both stated flatly and neither limited by sector, size or nationality: (1) AI-created information resources and AI-based information systems must not damage a person, their life, health, freedom, honour or dignity, or violate their other inalienable rights; (2) when taking legally significant decisions affecting a person's rights and freedoms it is not permitted to rely EXCLUSIVELY on the conclusions of such resources and systems. The second limb is a human-in-the-loop mandate on the decision-maker rather than a data-subject right — unlike the objection route in art. 24 of the Personal Data Law (uz-pd-art24), it is not triggered by the person and has no consent or contract exit. Art. 7¹ carries NO penalty of its own: ЎРҚ-1115 attached administrative liability only to unlawful AI processing of personal data (uz-koao-46-2-ai), not to art. 7¹. Verified against the official Uzbek-language consolidated text; the Russian text on lex.uz is marked an unofficial translation.
Stated maximum penalty — None — no penalty attached to art. 7¹
Binds Any person who unlawfully processes personal data using AI technologies and disseminates it in mass media, telecommunications networks or the Internet. Unlawfully processing personal data with AI technologies and disseminating it in the media, telecom networks or the Internet is an administrative offence carrying a fine and confiscation.
Part two was added to art. 46² of the Code on Administrative Liability (Law No. 2015-XII of 22 Sept 1994) by art. 2 of Law No. ЎРҚ-1115 of 21 January 2026, in force on publication (National Database of Legislation, 21.01.2026, No. 03/26/1115/0063). It reads: unlawful processing of personal data using artificial intelligence technologies, and their dissemination in mass media, telecommunications networks or the worldwide information network Internet, entails a fine of fifty to one hundred base calculation units (базовая расчетная величина, BRV — an index re-set periodically by presidential decree, so the soum figure moves) with confiscation of the objects of the offence. Note the cumulative structure: the text couples unlawful processing WITH dissemination, so AI processing that stays internal is charged under part one (7 BRV for citizens, 50 BRV for officials) rather than part two. ЎРҚ-1115 also added a matching ground to art. 12¹ of the Law on Informatization, which is the access-restriction route for the same conduct. This is the only penalty the 2026 AI amendment act created — art. 7¹ of the Law on Informatization has none.
Stated maximum penalty — Fine 50–100 BRV + confiscation of the objects of the offence
In force · 21 Jan 2026✓ checked 21 Aug 2026KoAO art. 46²(2) ↗high confidence
Questions & answers
From the data
When does Law on Informatization art. 7¹ (Law ЎРҚ-1115) + Personal Data Law art. 24 take effect in Uzbekistan?
Law on Informatization art. 7¹ (Law ЎРҚ-1115) + Personal Data Law art. 24 is already in force, with obligations live since October 1, 2019. Uzbekistan became the second Central Asian state to legislate on AI on 21 January 2026 — Kazakhstan's Law No. 230-VIII took effect on 18 January 2026, three days earlier — when Law No. ЎРҚ-1115 wrote artificial intelligence into the 2003 Law on Informatization. New art. 7¹ sets two flat rules with no sector, size or nationality limb: AI-created information resources and AI-based information systems must not damage a person's life, health, freedom, honour, dignity or other inalienable rights, and legally significant decisions affecting rights and freedoms may not rest exclusively on their conclusions — a human-in-the-loop mandate on the decision-maker, not a right the person has to invoke. Art. 7¹ carries no penalty; the only sanction the act created is a new part two of KoAO art. 46², 50–100 BRV plus confiscation, and it bites only where unlawful AI processing of personal data is COUPLED with dissemination in the media, telecom networks or the Internet. Separately, art. 24 of the 2019 Personal Data Law (ЗРУ-547, in force 1 Oct 2019 and never amended) bars solely automated decisions producing legal consequences unless there is written consent, a contract, or a legislative basis, and requires the owner/operator to explain the decision, accept an objection and answer it in writing within ten days.
Who must comply with AI rules in Uzbekistan?
Current obligations bind, among others, Anyone creating information resources using AI, or operating an information system that runs on AI technologies, in Uzbekistan — and anyone taking a legally significant decision affecting a person's rights and freedoms; Any person who unlawfully processes personal data using AI technologies and disseminates it in mass media, telecommunications networks or the Internet. Scope and thresholds vary per instrument — see each row's source for the legal text.
What are the penalties for AI non-compliance in Uzbekistan?
Stated statutory maxima include: KoAO art. 46²(2) — Fine 50–100 BRV + confiscation of the objects of the offence; Law ЗРУ-547 art. 24 — No article names art. 24; KoAO art. 46²(1) reaches unlawful processing generally (7 BRV citizens / 50 BRV officials). These are the maximum amounts in the instruments; actual enforcement is at the regulator's discretion.
Not legal advice. Each obligation links to its primary source and carries the date it was last checked; verify the legal text before relying on it.