Alert: important development in data protection and localisation in Uzbekistan — pharmaceuticals sector Effective: 27 August 2027
Uzbekistan has moved to strengthen enforcement of its personal data localisation requirements under the framework governing data protection for pharmaceutical operators. Foreign pharmaceutical companies — including manufacturers, distributors, and clinical research organisations — that collect, process, or transfer personal data of Uzbekistan residents in connection with their commercial or regulatory activities in the country are directly in scope. The development tightens the obligation to store qualifying personal data on servers physically located within Uzbekistan and introduces a more structured supervisory mechanism for sector-specific compliance verification.
Foreign pharmaceutical operators with existing Uzbekistan operations, registration processes, or distribution arrangements face the most immediate exposure. The rules apply to personal data processed in connection with clinical trials, pharmacovigilance reporting, patient and healthcare provider records, and distributor or employee data. Companies that have historically relied on server infrastructure located in Russia, the EU, or third-country cloud environments to process Uzbekistan-resident data will need to assess whether their current arrangements satisfy the localisation standard. The supervisory authority responsible for data protection in Uzbekistan has indicated that sector-specific inspections of pharmaceutical operators are a stated enforcement priority for the current period, which materially increases the practical risk of non-compliance being detected and acted upon.
Recommended action:
- Audit existing data flows — identify all categories of personal data of Uzbekistan residents processed in connection with Uzbekistan pharmaceutical operations, and map the location of processing and storage infrastructure against the localisation requirement.
- Assess cross-border transfer arrangements — where data is transferred to or processed by affiliates, CROs, or service providers outside Uzbekistan, confirm whether the applicable transfer mechanism satisfies the current regulatory standard or requires revision.
- Engage Uzbekistan-qualified counsel promptly — the supervisory timeline for the current inspection cycle means that voluntary remediation undertaken before an inspection is initiated is materially more straightforward than remediation under enforcement scrutiny.
[CTA: To discuss the implications for your Uzbekistan operations, contact the team: info@vetrovpartners.com | WhatsApp/Telegram: +7 (983) 510-38-76]
H2: About Vetrov & Partners
Vetrov & Partners is a Russian boutique law firm established in 2009, recognised by Pravo-300 for eight consecutive years. The firm advises foreign companies on cross-border regulatory and licensing matters across Russia and CIS jurisdictions, including Uzbekistan, working with trusted regional counsel where local qualification is required. Enquiries: info@vetrovpartners.com | WhatsApp / Telegram: +7 (983) 510-38-76 | t.me/vitvetcom
This alert is for informational purposes only and does not constitute legal advice. Vetrov & Partners is a Russian-qualified law firm. For matters governed by Uzbekistan law or requiring local Uzbekistan admission, we collaborate with trusted counsel in the relevant jurisdiction. Contact info@vetrovpartners.com for advice on your specific situation.
— Nodira Yusupova Contributing Regional Analyst — Uzbekistan, Vetrov & Partners vetrovpartners.com/contributions/