Regulatory Alerts2020-06-30 | 13/10Added · Updated
Regulation on Ensuring Information Security in Payment Systems by Payment System Operators and Payment Service Providers
The Board of the Central Bank of the Republic of Uzbekistan approved a regulation establishing mandatory information security requirements for payment system operators and payment service providers. The regulation mandates the implementation of identification, authentication, and authorization systems, cryptographic protection, and anti-virus measures to safeguard payment data and personal information. It requires entities to maintain logs of suspicious transactions, restrict employee access rights based on job functions, and protect infrastructure from cyberattacks. This regulation entered into force on June 30, 2020, and was superseded by a new regulation on August 23, 2024.