Law: Law of 3 August 2018 No.1537 on Protection of Personal Data (available in Tajik here and Russian here) (Law on Personal Data)

Regulator: The Communication Service under the Government of the Republic of Tajikistan

Summary: Law of August 3, 2018 No.1537 on Protection of Personal Data (available in Tajik here and Russian here) (the Law on Personal Data) provides a general approach to data protection that addresses essential topics such as key definitions, data transfers, consent, and data security. However, the Law on Personal Data does not provide for matters such as breach notifications, data protection officers, and only sets out limited data subject rights. A key area that has additional requirements is personal data protection related to employment, as provided for in the Labour Code of the Republic of Tajikistan of July 23, 2016 No. 1329 (only available to download in Russian here). There are further data protection related obligations detailed in the Law of Tajikistan of May 10, 2002 No. 55 on Information (only available in Tajik here).