🇹🇯
Tajikistan
Law on the Protection of Personal Data (2018)
Asia🟡 Moderate
Compliance Score
14%
2 Addressed
9 Partial
3 None
Authority
Designated state bodies under the national personal-data framework
Overview
Tajikistan adopted a dedicated personal-data law in 2018. The law provides a statutory basis for personal-data processing, while public information on independent supervision and detailed implementation may be limited.
14-Topic Coverage Analysis
Data Protection Authority
PartialConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
PartialBreach Notification
PartialDPO Requirements
PartialChildren's Data
PartialPenalties & Enforcement
PartialSector-Specific Rules
PartialCookie/Tracking
NoneAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
NoneGovernment Data
Partial? Frequently Asked Questions
What is the primary data protection law in Tajikistan?+
Tajikistan is governed by the Law on the Protection of Personal Data (2018). The law is enforced by the Designated state bodies under the national personal-data framework. According to our analysis, the country has a Moderate level of data protection framework.
Does Tajikistan require a Data Protection Officer (DPO)?+
Partially. The Law on the Protection of Personal Data (2018) may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Tajikistan?+
Partially. While Law on the Protection of Personal Data (2018) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Tajikistan?+
The Law on the Protection of Personal Data (2018) has limited breach notification requirements. It may only require notifying the regulator, without mandating notification to affected individuals.