The Legislative Chamber of the Oliy Majlis of the Republic of Uzbekistan adopted, on 15 April 2022, the Law on Cybersecurity (No. RK-764) ('the Cybersecurity Law'), for which the draft law had passed its first reading on 26 January 2022. In particular, the Cybersecurity Law highlights that the State Security Service of the Republic of Uzbekistan is the regulator in the field of cybersecurity. Furthermore, the Cybersecurity Law establishes 'basic principles of cybersecurity', which include:

• legitimacy;
• sustainability of protecting the interests of the individual, society, and the state in cyberspace;
• the Cybersecurity Law as the only approach to cybersecurity regulation;
• sustainability of the participation of local developers in the creation of cybersecurity systems; and
• openness of the Republic of Uzbekistan to international cooperation in cybersecurity.

Moreover, the Cybersecurity Law confirms that systems in the following areas, among others, are 'critical facilities', and thus impacted by the Cybersecurity Law:

• public administration and the provision of public services;
• defence;
• national security;
• law enforcement;
• fuel and energy industries (including nuclear energy);
• chemical and petrochemical industries;
• public health;
• housing and utility services;
• banking and finance;
• transportation; and
• information and communication technologies.

Finally, the Cybersecurity Law will enter into force on 17 July 2022.

You can read the Cybersecurity Law here, only available in Uzbek.