Uzbekistan Law on Personal Data (No. ZRU-547) MP-SECURITY: Apply the Model Procedure's protection measures: access roles, logging, integrity checks, encryption and authentication

What does MP-SECURITY require?

The Model Procedure requires owners and operators to split public and non-public data, set processing rules and who may access data, install and update security tools, keep database event logs and record user actions, use integrity controls, share data only over secure channels or encryption, use cryptographic protection for storage and identification and authentication tools, appoint a responsible person or unit (legal entities), approve internal policy documents, set blocking and destruction procedures, follow state information security standards and determine the required protection level.