Uzbekistan Moves to Regulate Artificial Intelligence (AI)

Uzbekistan has taken an important step toward regulating the use of artificial intelligence (AI) by introducing a comprehensive legal framework that defines AI, sets principles for its use, and establishes administrative liability for violations arising from its application. The recent legislative amendments reflect the government’s intention to balance technological development with the protection of fundamental rights, data security, and public trust.

These changes are particularly relevant for businesses operating in the technology, digital services, fintech, media, and data-driven sectors.

Defining Artificial Intelligence and State Policy Priorities

 

For the first time, Uzbek legislation formally defines artificial intelligence and outlines the key directions of state policy in this field. AI is treated not merely as a technological tool, but as a regulated element of information systems and digital infrastructure.

State policy in the AI sphere is focused on:

  • promoting innovation and the development of digital technologies;
  • ensuring safe, ethical, and lawful use of AI systems;
  • preventing harm to individuals, society, and the state;
  • protecting personal data and other legally protected interests.

This approach signals a shift toward proactive governance of emerging technologies rather than reactive regulation.

Rules for the Use of AI in Information Systems

 

The amendments introduce general requirements for the use of AI in the creation and operation of information resources and information systems. AI-based systems must be designed and used in a way that does not cause harm to a person’s life, health, freedom, honor, dignity, or other inalienable rights.

In practical terms, this places responsibility on developers, operators, and users of AI systems to:

  • assess potential risks associated with AI deployment;
  • ensure transparency and lawful data processing;
  • prevent discriminatory or harmful outcomes produced by automated systems.

Businesses using AI in customer interaction, decision-making, profiling, or content distribution should pay particular attention to these principles.

Liability for Violations Involving AI and Personal Data

 

A key element of the new framework is the introduction of administrative liability for violations related to the use of AI technologies, particularly in connection with personal data.

Administrative responsibility applies where AI is used for:

  • unlawful processing of personal data;
  • dissemination of personal data through the internet or mass media without legal grounds;
  • other violations of data protection requirements facilitated by AI technologies.

Sanctions include significant administrative fines, the possibility of administrative arrest in serious cases, and confiscation of technical equipment used to commit the violation. This underscores that responsibility extends beyond abstract system errors to concrete accountability for misuse.

Compliance Implications for Businesses

 

The new rules have direct implications for companies that:

  • develop or deploy AI-based software or platforms;
  • process large volumes of personal data using automated tools;
  • use AI for analytics, monitoring, facial recognition, or behavioral profiling;
  • distribute AI-generated content through online channels.

Businesses are expected to review their AI governance frameworks, data protection policies, and internal controls to ensure alignment with the new legal requirements. This includes documenting lawful grounds for data processing, implementing safeguards against misuse, and ensuring that AI systems are subject to human oversight where appropriate.

Strategic Significance of the Reform

 

By introducing a legal definition of AI and linking its use to accountability and data protection, Uzbekistan positions itself among jurisdictions that are actively shaping the regulatory environment for emerging technologies. The framework promotes responsible innovation while signaling that technological advancement must not come at the expense of individual rights and legal certainty.

For investors and technology companies, this provides greater predictability and clarity regarding regulatory expectations in the Uzbek market.

Conclusion

 

The introduction of a regulatory framework governing artificial intelligence and liability for its misuse represents a significant milestone in Uzbekistan’s digital regulation landscape. By combining innovation-friendly policies with enforceable safeguards, the new rules aim to support sustainable technological development while protecting personal data and fundamental rights.

For businesses, early adaptation and proactive compliance will be key to leveraging AI technologies responsibly and securely in Uzbekistan’s evolving digital economy.