Article 15. Cross-border transfer of personal data

Cross-border transfer of personal data is the transfer of personal data by the owner and (or) operator outside the territory of the Republic of Uzbekistan.

Cross-border transfer of personal data is carried out on the territory of foreign states that ensure adequate protection of the rights of subjects of personal data.

Cross-border transfer of personal data to the territory of foreign states that do not provide adequate protection of personal data may be carried out in the following cases:

the subjectʼs consent to the cross-border transfer of his personal data;

the need to protect the constitutional order of the Republic of Uzbekistan, the protection of public order, the rights and freedoms of citizens, health and morality of the population;

stipulated by international treaties of the Republic of Uzbekistan.

Cross-border transfer of personal data may be prohibited or restricted in order to protect the foundations of the constitutional order of the Republic of Uzbekistan, morality, health, rights and legitimate interests of citizens of the Republic of Uzbekistan, to ensure national defense and state security.