Legal Aspects of Cyber security for Legal Entities Contemporary Cyber Law Challenges and Solutions
DOI:
https://doi.org/10.59022/IRSHAD-iijcl.17Keywords:
Cyber security Law, Legal Entities, Cyber Governance, Cross-Border Compliance, Legal Accountability, Uzbekistan, Digital EconomyAbstract
Cyber security has become a central legal duty for entities worldwide today. Legal frameworks often lag behind fast-moving digital risks and threats. This study examines Uzbekistan’s Cyber security Strategy for 2026 through 2030. It explores governance models, cross-border compliance, and legal accountability gaps. The research aims to connect technical security measures with enforceable legal duties. A qualitative research design guided this study using doctrinal and document analysis. Researchers examined laws, decrees, and scholarly articles from official and academic sources. Results show that structured governance, harmonized standards, and clear accountability strengthen compliance. Findings also reveal challenges including enforcement gaps, technological change, and legislative fragmentation. The study recommends phased implementation, regional cooperation, and inclusive investment strategies. These recommendations support legal entities of varying size and technical capacity. The research concludes that effective cyber security law requires coordinated governance, cooperation, and shared legal accountability. This integrated approach offers useful lessons for other developing digital economies globally.
References
Allah Rakha, N. (2023). Cyber law: Safeguarding digital spaces in Uzbekistan. International Journal of Cyber Law, 1(5), 1–15. https://doi.org/10.59022/ijcl.532
AllahRakha, N. (2024). Practices of the advertisement legislation of the Republic of Uzbekistan. Yurisprudensiya, 4(1), 73–89. https://yurisprudensiya.tsul.uz/index.php/yurisprudensiya/article/view/12
Appazov, A. (2020). Legal aspects of cybersecurity: Challenges and solutions for legal entities. Journal of Security and Sustainability Issues, 10(2), 103–115. https://doi.org/10.9770/jssi.2020.10.2(9)
Balbaa, M. (2024). The role of investment in accelerating digital transformation: A SWOT analysis of Uzbekistan. Proceedings of the ACM. https://doi.org/10.1145/3726122.3726274
Bederna, Z., et al. (2022). Analysis of the cybersecurity ecosystem in the European Union: Legal challenges for natural and legal entities. International Cybersecurity Law Review, 3, 145–167. https://doi.org/10.1365/s43439-022-00048-9
Chałubińska-Jentkiewicz, K., Radoniewicz, F., & Szostek, D. (2021). Cybersecurity in Poland: Legal aspects and challenges for legal entities. Springer. https://doi.org/10.1007/978-3-030-78551-2
Chawki, M. (2026). Legal foundations and future directions of AI-enabled cybersecurity for corporate entities. Cogent Business & Management, 13(1), 2614015. https://doi.org/10.1080/23311886.2026.2614015
Chen, S., et al. (2023). Exploring the global geography of cybercrime and its legal procedural responses. Humanities and Social Sciences Communications, 10, Article 156. https://doi.org/10.1057/s41599-023-01560-x
Cortez, E. K. (2022). A corporate governance approach to cybersecurity risk disclosure. European Journal of Risk Regulation, 13(4), 789–810. https://doi.org/10.1017/err.2022.45
Davies, G. (2024). Does the GDPR break the Internet? The case for a public data exception for legal entities. International Data Privacy Law, 14(4), 315–330. https://doi.org/10.1093/idpl/ipae015
Ding, W., et al. (2022). Regulating the use of big data: Justifications, perspectives, and legal frameworks. Computer Law & Security Review, 46, 105720. https://doi.org/10.1016/j.clsr.2022.105720
Gonzalez-Granadillo, G., et al. (2021). Automated cyber and privacy risk management toolkit for legal entities. Sensors, 21(16), 5432. https://doi.org/10.3390/s21165432
Gulyamov, S. (2020). Legal regulation of artificial intelligence in Uzbekistan: Current state and prospects. International Journal of Advanced Research in Law and Social Sciences, 4(2), 22–35.
Gulyamov, S. (2025). Technical assistance program for countering cybercrime in Central Asia: Legal and procedural frameworks. TSUL Legal Report, 8(1), 34–48. https://legalreport.tsul.uz/index.php/legalreport/article/download/68/66
Gulyamov, S., & Rustambekov, I. (2024). Draft concept of the Republic of Uzbekistan in the field of development artificial intelligence for 2021-2030. Uzbek Journal of Law and Digital Policy, 1(4). https://doi.org/10.59022/ujldp.256
Islam, M. S., Farah, N., & Stafford, T. F. (2018). Factors associated with security/cybersecurity audit by internal audit function: An international study. Managerial Auditing Journal, 33(4), 377–409. https://doi.org/10.1108/MAJ-07-2017-1595
Jeong, C. Y., Lee, S.-Y. T., & Lim, J.-H. (2019). Information security breaches and IT security investments: Impacts on competitors and legal compliance. Information & Management, 56(5), 681–695. https://doi.org/10.1016/j.im.2018.12.001
Jin, X., & Wang, Y. (2024). Does cybersecurity regulation promote corporate digital transformation and legal compliance? Finance Research Letters, 62, 105123. https://doi.org/10.1016/j.frl.2024.105123
Karlsson, D., & Söderholm, A. (2026). Does inter-municipal collaboration strengthen cybersecurity compliance for legal entities? State and Local Government Review, 58(1), 45–62. https://doi.org/10.1080/23738871.2026.2642608
Kassanova, N. (2021). Digital Silk Road in Central Asia: Present and future. Davis Center for Russian and Eurasian Studies, Harvard University. https://daviscenter.fas.harvard.edu/sites/default/files/files/2021-10/Digital_Silk_Road_Report_2021.pdf
Khakimov, G. (2026). Issues of applying artificial intelligence to administrative procedure process in Uzbekistan. Uzbek Journal of Law and Digital Policy, 4(2), 57–76. https://doi.org/10.59022/ujldp.539
Kianpour, M., et al. (2024). More than malware: Unmasking the hidden risk of cybersecurity compliance for legal entities. SN Computer Science, 5, 111. https://doi.org/10.1365/s43439-024-00111-7
Kosseff, J. (2018). Defining cybersecurity law. Iowa Law Review, 103(3), 985–1031. https://ilr.law.uiowa.edu/print/volume-103-issue-3/defining-cybersecurity-law
Liu, C., & Babar, M. A. (2026). Corporate cybersecurity risk and data breaches: A systematic review of empirical research. Australian Journal of Management, 51(1), 62–92. https://doi.org/10.1177/03128962241293658
Musaev, G. (2023). Digital evidence as a direction in the investigation of crimes. Society and Innovations, 4(4), 132–138. https://doi.org/10.47689/2181-1415-vol4-iss4-pp132-138
National Academies of Sciences, Engineering, and Medicine. (2024). Engaging scientists in Central Asia on life science data governance principles: Proceedings of a workshop series. The National Academies Press. https://doi.org/10.17226/27433
Organization for Security and Co-operation in Europe. (2024). Concluding event of the OSCE regional project on combating cybercrime in Central Asia: Legal and procedural frameworks. OSCE Secretariat. https://www.osce.org/secretariat/570738
Pisa, M., et al. (2021). Why data protection matters for development: The case for strengthening inclusion and cybersecurity in emerging economies. Center for Global Development. https://doi.org/10.5339/cgd.2021.wp.589
President of the Republic of Uzbekistan. (2026, March 10). On the approval of the Cybersecurity Strategy of the Republic of Uzbekistan for 2026–2030 (Presidential Decree No. UP-38). National Database of Legislation of the Republic of Uzbekistan. https://lex.uz/docs/8079279
Rasulev, A. K. (2023). Prospects of legal policy in the field of combating cybercrime in Uzbekistan. Society and Innovations, 4(3), 124–132. https://doi.org/10.47689/2181-1415-vol4-iss3-pp124-132
Republic of Uzbekistan. (2022, April 15). Law of the Republic of Uzbekistan "On Cybersecurity" (No. ZRU-764). National Database of Legislation. https://lex.uz/docs/5960609
Republic of Uzbekistan. (2024). Law "On amendments and additions to certain legislative acts of the Republic of Uzbekistan aimed at improving the system for handling digital evidence" (No. ZRU-1003). National Database of Legislation. https://lex.uz/docs/7228823
Rickett, L. K. (2024). Major cybersecurity breaches: Shaping corporate legal obligations and compliance. Journal of Corporate Accounting & Finance. https://doi.org/10.1002/jcaf.70032
Shukhratovich, S. (2024). Evaluating the performance of e-government in Uzbekistan: Cybersecurity and legal compliance. 2024 International Conference on Information Science and Communications Technologies (ICISCT). https://doi.org/10.1109/ICISCT64202.2024.10957004
Tanaka, M. (2025). From the Digital Silk Road to the governance of cyberspace: China's cyber norm diffusion strategy in Central Asia. Central Asian Survey. https://doi.org/10.1080/24761028.2026.2647684
Teichmann, F. (2026). Whistleblowing at the intersection of NIS2, the Cyber Resilience Act, and corporate legal obligations. SN Business & Economics. https://doi.org/10.1365/s43439-026-00174-8
Tojiboyev, S. Z. (2026). Beyond personal data protection: Constructing a legal framework for big data governance in Uzbekistan. Journal of Sustainable Development and Economic Review, 4(2), 45–62. https://journal.yapici.or.id/index.php/JSDERI/article/view/395
Tojiev, O. (2026). Legal problems of information security and personal data protection in the activity of a digital parliament. International Journal of Law and Policy, 4(8), 28–54. https://doi.org/10.59022/ijlp.632
Tschider, C. (2024). The new EU–US data protection framework's implications for cybersecurity law. Journal of Law and the Biosciences, 11(2), Article lsae022. https://doi.org/10.1093/jlb/lsae022
United Nations Department of Economic and Social Affairs. (2024). E-Government Survey 2024: Chapter 3 - Regional e-government development and the performance of cybersecurity excellence centers. United Nations. https://desapublications.un.org/sites/default/files/publications/2024-09/%28Chapter%203%29%20E-Government%20Survey%202024%201392024.pdf
Vostoupal, J., Stupka, V., Harašta, J., Kasl, F., Loutocký, P., & Malinka, K. (2024). The legal aspects of cybersecurity vulnerability disclosure: To the NIS 2 and beyond. Computer Law & Security Review, 53, 105988. https://doi.org/10.1016/j.clsr.2024.105988
Yakubova, M. (2026). Digital anti-corruption mechanisms in Uzbekistan: Legal frameworks, e-government tools, and reform challenges. Uzbek Journal of Law and Digital Policy, 4(4), 43–63. https://doi.org/10.59022/ujldp.630
Yarashov, I. (2024). Research and classification of cybersecurity threats in the e-government system. In Proceedings of the International Conference on Information and Communication Technologies (pp. 215–226). Springer. https://doi.org/10.1007/978-3-031-95299-9_22
Yetgin, M. A. (2023). Digitalization and cyber security policies in Uzbekistan's development strategy. E3S Web of Conferences, 431, 07049. https://doi.org/10.1051/e3sconf/202343107049
Zafar, A. (2025). Reconciling blockchain technology and data protection laws: Regulatory challenges, technical solutions, and practical pathways for legal entities. Journal of Cybersecurity, 11(1), Article tyaf002. https://doi.org/10.1093/cybsec/tyaf00
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Raxmatov Uktam Utkirovich (Author)
This work is licensed under a Creative Commons Attribution 4.0 International License.
