Uzbekistan: technology regulation at a glance

Framework: Presidential Decree No. 3832 (2018) and subsequent presidential decrees; NAPP (National Agency for Perspective Projects) as primary licensing and supervisory authority; Law ZRU-899 (Jan 2024) introducing criminal/administrative liability for illegal crypto activity

Uzbekistan established one of Central Asia's most proactive crypto regulatory frameworks beginning in 2018, with full licensing operations under NAPP since 2022. Residents may legally trade crypto assets exclusively through NAPP-licensed domestic VASPs; use of unlicensed or foreign platforms is prohibited and, since April 2024, subject to criminal penalties. A major 2026 overhaul legalizes stablecoins as payment instruments and introduces tokenized securities within a jointly supervised NAPP/Central Bank sandbox.

Framework: Law No. ZRU-1115 (amending the Law 'On Informatization', signed 21 January 2026); National AI Strategy until 2030 (Presidential Resolution No. PP-358, 14 October 2024); Ministry of Digital Technologies as primary supervisory authority

Uzbekistan enacted Law No. ZRU-1115 in January 2026, embedding a cross-sectoral AI legal framework, covering definitions, mandatory content labelling, human-oversight requirements, and personal data liability, into the existing Law 'On Informatization'. This is underpinned by the National AI Development Strategy until 2030, approved by Presidential Resolution PP-358 in October 2024, which tasks the Ministry of Digital Technologies with regulatory oversight and targets USD 1.5 billion in AI-based services revenue by 2030. Uzbekistan is among the first Central Asian states to enact AI-specific legislation.

Framework: Law No. ZRU-547 'On Personal Data' (2019, as amended 2021 and March 2026); supervised by the Personalization Agency under the Ministry of Justice and Uzkomnazorat (State Inspectorate for Control in the Field of Informatization and Telecommunications)

Uzbekistan has a standalone, comprehensive personal data protection law (ZRU-547) in force since October 2019, modelled in part on GDPR principles but with distinct localization requirements. A March 2026 amendment signed by President Mirziyoyev substantially liberalised cross-border data transfers, retaining domestic-storage mandates only for biometric, genetic, and telecommunications-operator data. Enforcement has been tightening, with a April 2025 presidential decree introducing mandatory breach notifications and expanded liability for the financial sector.

Framework: Law of the Republic of Uzbekistan "On Payments and Payment Systems" (in force 3 February 2023), administered by the Central Bank of the Republic of Uzbekistan (CBU), with licensing under CBU Resolution No. 3431 (5 May 2023).

Uzbekistan operates a dedicated, in-force licensing regime for digital payments under the 2023 Law on Payments and Payment Systems, supervised by the Central Bank. Payment system operators and non-bank payment organizations must hold a CBU license, and the CBU maintains public registers; as of early 2025 there were 2 licensed operators (Humo, Uzcard) and roughly 49 licensed payment organizations (Payme, Click, Uzum, Oson, etc.). E-money issuance is reserved to the Central Bank and commercial banks, while payment organizations may only operate/process e-money, and a Central Bank-run instant (fast) payment rail is live.

Framework: Presidential Decree on IT Park / Technopark (outsource.gov.uz) for the IT Visa; Cabinet of Ministers resolution for the 'Uzbekistan, My Second Home' long-stay visa; Ministry of Foreign Affairs (mfa.uz / e-visa.gov.uz) for standard visa categories

Uzbekistan has no visa formally labelled 'digital nomad,' but offers two practical long-stay routes for remote workers: a 3-year IT Visa for tech professionals and investors tied to the national IT Park, and a 1-year 'My Second Home' multiple-entry tourist visa piloted in the Khorezm region. A separate investment-based residence permit is also available for larger capital commitments.

Framework: Law on Telecommunications (1999, revised December 2024); Ministerial Order No. 216 (2004); Ministry of Digital Technologies; Draft Law 'On the Protection of User Rights on Online Platforms and Websites' (proposed May 2025)

Uzbekistan operates a heavily state-controlled internet environment rated 'Not Free' by Freedom House (score ~27/100 in 2025), characterised by routine website blocking, criminal penalties for online criticism of officials, and mandatory ISP content filtering. A new Law on Telecommunications signed by President Mirziyoyev in December 2024 expanded regulatory authority, while a draft platform-regulation law published for public consultation in May 2025 signals a partial shift toward a structured online-safety framework but remains proposed rather than enacted.

Framework: Law of the Republic of Uzbekistan 'On Cybersecurity' (April 2022, ZRU-764); administered by the State Security Service (SSS) as authorised cybersecurity body and UZCERT as the national CERT

Uzbekistan enacted a dedicated Cybersecurity Law in April 2022 establishing an overarching framework covering critical information infrastructure (CII), mandatory certification of security tools, and the SSS as the principal regulator. Presidential Resolution PP-167 (May 2023) elaborated CII-specific obligations, Presidential Decree PQ-153 (April 2025) tightened breach-notification duties especially for the financial sector, and Presidential Decree UP-38 (March 2026) launched a new National Cybersecurity Strategy for 2026-2030.

Framework: Law on Investments and Investment Activity (No. ЗРУ-598, 25 December 2019); Law on Limited Liability Companies; Civil Code of Uzbekistan, administered by the Ministry of Justice and the Agency for Public Services

Uzbekistan permits 100% foreign ownership of LLCs and JSCs with no mandatory local partner and no statutory minimum charter capital. Online registration via my.gov.uz typically completes in 3-5 working days for a nominal state fee. From 1 January 2026, a 'Start a Business in 15 Minutes' one-stop regime entered force, bundling registration, VAT certificate, electronic signature, and bank-account opening in a single session.