Domestic law and policy

Uzbek law does not define digital ID and there is no single standalone law that pertains to digital ID. The Strategy Digital Uzbekistan-2030, adopted in 2020, along with subsequent presidential acts set out the national vision for e-government and digital public services.^[26] A key building block is the Law on Electronic Digital Signature (2023), which grants legal validity to e-signatures and allows citizens, non-residents, and stateless persons to obtain them, including through consulates abroad.^[27] Another central component is OneID, the government’s Single Identification System that functions as the cross-agency authentication and authorization service for users of e-government platforms such as my.gov.uz. This system was further integrated from July 1, 2025 when electronic versions of identity documents (such as passports, ID cards, and driver’s licenses) presented through approved apps are legally recognized as equivalent to paper originals.^[28] The law On Electronic Government’ (2015) also establishes the legal basis for providing public services electronically, including requirements for digital identification and interoperability.^[29] In terms of filing grievances and complaints, there is an online feedback mechanism and help desk supportfor users to resolve technical issues related to the Digital ID system.^[30] Furthermore, legal protections, such as the law On Data Protection (2019) ( referred to hereafter as Data Protection Law’), outline citizens’ rights to challenge incorrect data or misuse of their digital identity in court.^[31]

Data Protection

Uzbekistan’s Data Protection Law, in force since 2019, regulates the collection, processing, and protection of personal data, including data processed within the Digital ID system.^[32] Some of the safeguards existent in the Data Protection Law include collecting and processing data fairly, for specific legitimate purposes, subject to the principles of data minimization and informed consent.^[33] The law provides special protection for biometric data such as fingerprints, facial recognition data, treating it as sensitive personal data, but does not mandate encryption.^[34] Explicit consent is required for the collection of such personal information, and additional security measures must be taken to safeguard this information.^[35] While the government cannot outrightly access personal data for any purpose, there are specific cases in law which justify the access of personal data, such as in the cases of national security, provided written consent of the individual is obtained, if the data is already publicly available, during criminal proceedings, among other cases.^[36] 

However, Amnesty International has reported pervasive surveillance being conducted both within the country and internationally by  Uzbekistan.^[37] The Report highlights the targeting of human rights defenders, journalists, and even refugees abroad, showcasing how the government monitors communications without proper legal safeguards.^[38] Such practices undermine freedom of expression, privacy, and safety inside and outside Uzbekistan, and demand urgent reform to bring surveillance laws in line with international human rights standards.^[39]

International Commitments

Uzbekistan is not a party to any international treaty that specifically regulates digital identity systems. Nonetheless, the country has sought to align its legal identity framework with international best practices by referencing the UN Sustainable Development Goals, particularly SDG Target 16.9, which calls for ‘legal identity for all, including birth registration’.^[40] Additionally, Uzbekistan has ratified several human rights treaties, including the ICCPR, ICESCR, CRC, CERD, and CEDAW.^[41] The ICCPR enshrines  the right to privacy and restricts the use of personal data to lawful and proportionate purposes.^[42] The ICESCR and CERD both guarantee equality and non-discrimination in access to essential rights and services.^[43] There are, however, concerns that Uzbekistan’s OneID system may exclude stateless persons who do not hold the necessary documentation, from accessing its services.^[44] Without access to OneID, stateless individuals risk being denied essential state-sponsored services, raising potential violations of Uzbekistan’s obligations under the ICESCR and CERD.^[45]

On 26 June 2025, Uzbekistan adopted the Ministerial Declaration on a Decade of Action for Inclusive and Resilient Civil Registration and Vital Statistics in Asia and the Pacific, pledging commitments to universal access, gender equality, digital inclusion, and resilient CRVS systems.^[46] The Declaration commits to building secure digital public infrastructure that enables equitable access to services and entitlements, while ensuring that ‘vulnerable and digitally marginalized groups’ are not excluded.^[47]