Support Centre



Law: Law of 3 August 2018 No.1537 on Protection of Personal Data (available in Tajik here and Russian here) ('Law on Personal Data')

Regulator: The Communication Service under the Government of the Republic of Tajikistan

Summary: The Law on Personal Data provides a general approach to data protection that addresses essential topics such as key definitions, data transfers, consent, data security, and so on. However, the Law on Personal Data does not provide for matters such as breach notifications, data protection officers, and only sets out limited data subject rights. A key area that has additional requirements is personal data protection related to employment, as provided for in the Labour Code of the Republic of Tajikistan of 23 July 2016 No. 1329 (only available to download in Russian here). There are further data protection related obligations detailed in the Law of Tajikistan of 10 May 2002 No. 55 on Information (only available in Tajik here). 


The Assembly of the Representatives, under the Majlisi Oli of the Republic of Tajikistan, recently published a Draft Information Code ('the Draft Code') to provide legal bases for information activities. In contrast to existing legislation, such as the Law of 3 August 2018 No. 1537 on Protection of Personal Data ('the Law on Personal Data'), the Draft Code aims to establish a wide-ranging framework for information relations, encompassing both personal and non-personal data. OneTrust DataGuidance breaks down the key provisions of the Draft Code, featuring insights from Alisher Hoshimov and Amina Nazaralieva, Partner and Paralegal respectively at Centil Law Firm.