A basic legal framework on intermediary liability for copyright infringement is absent in Uzbekistan's law and jurisprudence.

According to Art. 31 of the Law on Personal Data, government bodies, legal entities and individuals processing personal data (i.e. operators of personal data) or having the right to use and dispose personal data (i.e. owners of personal data) must designate a structural unit or a responsible person that has to organize work with respect to personal data protection in the course of its processing.

It is reported that ISPs and mobile service providers must provide to the authorities direct, real-time access to their communications networks without notification and oversight. These operators must install System for Operational Investigative Measures (SORM)-compliant surveillance equipment on their networks in order to obtain an operating license, which would provide the authorities unfettered access to internet traffic and subscribers’ information. It is reported that this measure is contained in the Resolution of the President on Measures for Increasing the Effectiveness of Operational and Investigative Actions on the Telecommunications Networks of the Republic of Uzbekistan, but the text is not available online.

Art. 15 of the Law on Cybersecurity provides that operators of critical facilities must store a backup copy of all data from information systems and resources for at least three months. This requirement affects businesses that possess, operate or interoperate information systems used in critical facilities, including public administration and the provision of public services, defense, national security, law enforcement, fuel and energy industries (including nuclear energy), chemical and petrochemical industries, metallurgy, water management and water supply, agriculture, public health, housing and utility services, banking and finance, transportation, information and communication technologies, ecology and environmental protection, extraction and processing of minerals of strategic importance, manufacturing, other sectors of the economy and the social sphere.

The Law of the Republic of Uzbekistan on Personal Data provides for a comprehensive regime of data protection regime in Uzbekistan. It is the first unified data protection law and outlines requirements for data subjects' consent, the purposes of processing, and notifying data subjects when transferring their personal data to a third party. The excludes biometric, educational, criminal and health information, previously included in a draft version, from its application.

Uzbekistan has not joined any agreement with binding commitments to open transfers of data across borders.

In accordance with Art. 15 of the Law on Personal Data, cross-border transfers of personal data can be carried out when a foreign state ensures adequate protection for the rights of the subjects of personal data. In the absence of such protection, the cross-border transfer of personal data is allowed in the following cases:
- the data subject has consented to the cross-border transfer of their personal data;
- there is a need to protect constitutional order, public order, the rights and freedoms of citizens, or the health and the morals of the population; or
- it is stipulated by international treaties.
The transfer of personal data may be prohibited or restricted in order to protect the constitutional system of the Republic of Uzbekistan, the rights and legitimate interests of citizens, or to ensure the security of the State.

The telecommunications authority in the country is the Ministry for Development of Information Technologies and Communications of the Republic of Uzbekistan (MiTC). Therefore, the authority is not independent in its decision-making and it is reported that it operates opaquely.

Art. 27-1 of the Law on Personal Data provides that the owners and/or operators are obliged to ensure that databases containing personal data of citizens of Uzbekistan are collected, systematized, and stored using technical means physically located in the territory of Uzbekistan. Moreover, the operators have to register their databases in the State Register of Personal Databases.

Uzbekistan has not appended the World Trade Organization (WTO) Telecom Reference Paper to its schedule of commitments. In fact, Uzbekistan is not a member of the WTO.

Uzbekistan does not mandate functional or accounting separation for operators with significant market power (SMP) in the telecom market.

It is reported that licensing can be an instrument of control in the telecommunications sector, that the process is often encumbered by political interests and has historically been marred by bribery. Annex No. 1 of Law No. LRU-701 lists the activities for which a licence is required, including design, construction, operation, and provision of services of telecommunications networks. In addition, Annex No. 15 of Resolution No. 80 lists the documents to be submitted for obtaining the license and establishes the licensing requirements and conditions to be met when carrying out licensed activities, including the licensee's participation in the implementation of national programs for the development of telecommunications to solve national problems, and the mandatory provision of services to consumers in rural areas, sparsely populated and hard-to-reach areas.

The government owns shares in several telecommunications companies. In particular, 96.4% of the shares of Uzbektelecom JSC are held by Uzbek public institutions. In addition, three of the five mobile operators active in the mobile market are state-owned, namely Ucell (49% owned by the State Assets Management Agency of the Republic of Uzbekistan), Mobiuz (fully owned by the Ministry for Development of Information Technologies and Communications), and UzMobile (sub-brand of Uzbektelecom).

There is no obligation for passive infrastructure sharing in Uzbekistan to deliver telecom services to end users. However, it is reported that passive sharing is practiced in the mobile sector based on commercial agreements.

Law LRU-374 provides a framework for effective protection of trade secrets.