Support Centre

Kyrgyzstan

Summary

Law:  Law of the Kyrgyz Republic of 14 April 2008 No. 58 on Personal Information as amended by the Law of the Kyrgyz Republic of 20 July 2017 No. 129 (only available in Kyrgyz here and Russian here) ('the Law on Personal Data')

Regulator: State Agency for Protection of Personal Data (the Agency)

Summary: At present, the Law on Personal Data provides general requirements on both data controllers and processors, as well as data subject rights and data transfers. However, the Law on Personal Data does not address either data protection officers or data breach notification requirements. In addition to the above, other laws such as the Constitution of the Kyrgyz Republic (only available in Kyrgyz here and Russian here) and the Criminal Code of the Kyrgyz Republic (only available in Russian here and Kyrgyz here) still apply with respect to violations of the right to private life. In 2021, the President of the Kyrgyz Republic by Decree No. 391 dated as of 14 September 2021 (only available in Kyrgyz here and Russian here) established the Agency.