Status
In force
Consent model
Opt-in
Primary law
Law on Personal Data Protection
Year
2018
Authority
Communications service under the Government
Marketing consent
Consent-based with listed exceptions.
Transfers
Transfers are restricted to adequate destinations unless the individual consents.
Penalties
The authority can impose administrative fines.
The framework
The operative statute in Tajikistan is the Law on Personal Data Protection (2018), enforced by a communications service under the government.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Law on Personal Data Protection
2018 · In force
A 2018 consent-based law with limited visible enforcement.
Marketing and advertising
Consent-based with listed exceptions. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers are restricted to adequate destinations unless the individual consents.
Enforcement and penalties
The authority can impose administrative fines. How often the authority actually enforces sets the real price.
Cite this page: "Tajikistan Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/tajikistan.html. Accessed [date].