A potential personal data leak should not become a reason to restrict the exchange of information and reduce openness in Uzbekistan, believes digital technology expert Shukhrat Kurbanov. He emphasizes that the main problem lies not in the data exchange process itself, but in the methods of its storage and access control.
Recently, messages appeared on social networks about a potential leak of personal information of users of services such as SafeRoad, inDrive, Lada Auto, KiwiTaxi, and Fargo. Kurbanov personally checked the distributed databases and found his personal data in them, including TIN, residential address, vehicle information, and corresponding documents. However, the circumstances and source of this information remain unknown.
Later, the company SAFE Service denied any connection between its SafeRoad application and the alleged leak. Company representatives stated that the circulating information was collected from various sources even before the application started operating. Furthermore, they reported that they are cooperating with authorized state structures to respond to the spread of false information.
Risks of tightening data exchange rules
Commenting on the situation, Shukhrat Kurbanov expressed concern that the mere fact of discussing a possible leak could provoke a tightening of data exchange regulations. In his opinion, such a development would be a step backward and would not ensure proper protection of personal information.
He recalled the example of the OneID system, where changes occurred in the procedure for granting access. Previously, access was open by default and restricted only in exceptional cases; however, after modifications, users had to independently grant permission to access their data. As the expert noted, this complicated the process, forcing bank employees and clients to deal with OneID settings, and even required specialists in banking institutions to assist in arranging such access.
Kurbanov insists that the focus must shift from the fact of data exchange to the methods of its storage and controlling who can access it. He also suggests conducting a detailed study of the reasons why companies and government agencies collect and store certain information about citizens.
Proposals for strengthening citizen control
The expert believes that citizens need to be provided with expanded opportunities to monitor their information. Specifically, they should have the right to know who, when, and on what legal basis their personal data was requested. Moreover, Kurbanov considers it vital to introduce a transparent mechanism for withdrawing access permissions, as well as ensuring the possibility of deleting or anonymizing information.
As a positive example, he cited Estonia, where through an electronic cabinet, a user can see which specific agency, official, or commercial organization accessed their personal data and when. In the expert's opinion, a similar mechanism could allow residents of Uzbekistan to track access to their data.
Kurbanov emphasized that the principles of openness and digitalization contribute to reducing bureaucracy and corruption levels, as well as stimulating development. Instead of reverting to closed models, it is necessary to improve data storage procedures, strengthen control over access to it, and increase transparency in the use of personal information for citizens.