Data Localization Under Uzbekistan's Personal Data Law
Uzbekistan's Law "On Personal Data" (No. ZRU-547), amended by Article 27-1 in 2021, originally required that the personal data of Uzbek citizens be collected, systematized, and stored exclusively on servers physically located inside the country. Amendments signed into law in March 2026 eased this rule considerably: most categories of personal data can now be stored abroad if the operator meets specific security and adequacy conditions, while biometric, genetic, and telecom-related data must still remain on servers located within Uzbekistan (https://www.loc.gov/item/global-legal-monitor/2021-05-07/uzbekistan-new-requirements-for-uzbek-citizens-personal-data-localization-enter-into-force/). A redundant data center architecture with in-country capacity still matters for a business whose data falls into one of the categories still requiring domestic storage, or whose enterprise clients simply expect a locally hosted answer during a procurement review.
For a business selling to Uzbek government-adjacent, telecom, or financial-sector clients, confirming which category a given dataset falls under before choosing a hosting location is worth doing early, since the 2026 amendments narrowed but did not eliminate the localization requirement. A provider that can speak to both scenarios, domestic hosting for data still subject to localization and a compliant cross-border option for everything else, saves a business from re-architecting its hosting setup if the regulatory boundary shifts again.




