The new rules affected not only microfinance organizations and pawnshops, but also factoring and guarantee companies. Their clients' biometric data must now be located exclusively in Uzbekistan.

The Central Bank of Uzbekistan has tightened information security requirements for non-bank credit organizations. The corresponding changes were introduced by a resolution dated July 22, which the Ministry of Justice registered on August 5. The document came into force on August 6.

Now the requirements apply to microfinance organizations, pawnshops, mortgage refinancing organizations, as well as companies providing guarantees and factoring services. A single designation has been introduced for all of them – "non-bank credit organizations".

One of the key innovations concerns biometric information. Data used for client identification and authentication must be stored in Uzbekistan. At the same time, ordinary personal data not related to biometrics may be stored and processed abroad, provided that the requirements of the Law "On Personal Data" are met.

In addition, the regulator brought the terminology of the document in line with legislation: the word "secret" has been replaced with "confidential". The law also provides for the mandatory storage in Uzbekistan of genetic data of citizens and data of users of telecommunications operators working in the country.