CURRENT ISSUES OF LEGAL SUPPORT FOR CYBERSECURITY IN THE REPUBLIC OF UZBEKISTAN AND PROSPECTS FOR ITS IMPROVEMENT
##doi.readerDisplayName##:
https://doi.org/10.68023/fkx7f972Kalit so‘zlar:
cybersecurity, digital law, critical information infrastructure, cyber incident, personal data, artificial intelligence, legal regulation, NIS2, cybercrime, information security audit.Abstrak
This article examines the current state of the legal framework for cybersecurity in the Republic of Uzbekistan from constitutional, information-law, criminal-law, and comparative-law perspectives. The rapid digitalization of public administration, finance, education, healthcare, and entrepreneurship has increased dependence on information systems while also intensifying the risks posed by phishing, malware, distributed denial-of-service (DDoS) attacks, personal data breaches, and artificial intelligence-assisted manipulation. The study analyzes the Constitution of the Republic of Uzbekistan, Law No. ZRU-764 “On Cybersecurity,” Law No. ZRU547 “On Personal Data,” relevant information legislation, the Budapest Convention model, the NIS2 Directive, international
standards, and academic literature. The findings demonstrate that Uzbekistan has established the principal institutional and legal foundations of cybersecurity. However, risk-based incident reporting, public–private cooperation, liability for cross-border incidents, AIassisted cyberattacks, independent auditing, the rights of persons affected by data breaches, and compensation mechanisms remain insufficiently defined. Accordingly, the article proposes a five-stage legal mechanism integrating identification, prevention, monitoring, response, and accountability.
References
1. Republic of Uzbekistan. (2022). Law No. ZRU-764 “On Cybersecurity” (15 April 2022). https://lex.uz/docs/5960604
2. Republic of Uzbekistan. (2019). Law No. ZRU-547 “On Personal Data” (2 July 2019). https://lex.uz/docs/4396419
3. Constitution of the Republic of Uzbekistan. (2023). https://lex.uz/docs/6445145
4. Republic of Uzbekistan. (2003). Law “On Informatization.” National Database of Legislation.
5. Republic of Uzbekistan. Criminal Code and Code of Administrative Liability: provisions concerning unlawful access, interference with information systems and violations of personal-data requirements.
6. European Parliament and Council. (2022). Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS2). https://eur-lex.europa.eu/eli/dir/2022/2555/oj
7. Council of Europe. (2001). Convention on Cybercrime (Budapest Convention), ETS No. 185. https://www.coe.int/en/web/cybercrime/the-budapest-convention
8. International Organization for Standardization. (2022). ISO/IEC 27001:2022—Information security management systems—Requirements.
9. OECD. (2015). Recommendation of the Council on Digital Security Risk Management for Economic and Social Prosperity. https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0415
10. International Telecommunication Union. (2024). Global Cybersecurity Index 2024. https://www.itu.int/epublications/publication/global-cybersecurity-index-2024
11. European Union Agency for Cybersecurity. (2024). ENISA Threat Landscape 2024. https://www.enisa.europa.eu/publications/enisa-threat-landscape-2024
12. Kshetri, N. (2021). Cybersecurity Management: An Organizational and Strategic Approach. University of Toronto Press.
13. Brenner, S. W. (2010). Cybercrime: Criminal Threats from Cyberspace. Praeger.
14. Lessig, L. (2006). Code: Version 2.0. Basic Books.
15. Solove, D. J., & Schwartz, P. M. (2021). Information Privacy Law (7th ed.). Wolters Kluwer.
16. OECD. (2024). OECD Digital Economy Outlook 2024. OECD Publishing.
17. United Nations Office on Drugs and Crime. (2013). Comprehensive Study on Cybercrime. United Nations.
18. National Institute of Standards and Technology. (2024). The NIST Cybersecurity Framework (CSF) 2.0. https://doi.org/10.6028/NIST.CSWP.29
