Tajikistan

Summary

Tajikistan has thin cyber-law enforcement infrastructure but the primary legal instruments are adequately sourced in English. The Law on Personal Data Protection (No. 1537 of 3 August 2018) is the first dedicated personal-data statute; it establishes basic protection obligations with penalty fines of TJS 2,320-29,000 (~$200-2,500). The Criminal Code Chapter 28 (Arts. 298-302) addresses computer crimes including illegal access to computer information (Art. 298, requires unauthorized access causing harm). The Council of Europe Octopus assessment identifies significant procedural gaps relative to the Budapest Convention: Art. 299 covers only data modification (not full interference); Art. 300 covers only system damage; expedited preservation and production-order mechanisms are absent. No TDM copyright exception. No English-language scraping case law. The law exists on paper; practical enforcement risk is lower than in Kazakhstan or Uzbekistan due to limited institutional capacity. Confidence raised to medium as core legislation is confirmed via English-language primary and secondary sources (Legislationline, CIS-Legislation, DLA Piper, UNODC/CoE Octopus).