Skip to main content

    AI by country · Central Asia

    AI in Kyrgyzstan: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Kyrgyzstan know before starting with AI?

    Kyrgyzstan regulates AI and personal data through one law, the Digital Code of 31 July 2025, which came into force in early February 2026 and replaced the 2008 Law on Personal Information. Every AI system used in the country needs a risk assessment, and high-risk systems need a published declaration of conformity. A company should assess its AI systems, tell people when they are talking to AI and check its data transfers abroad.

    At a glance

    Kyrgyzstan at a glance

    Key facts about Kyrgyzstan
    Data protection lawDigital Code of the Kyrgyz Republic, No. 178 of 31 July 2025, in force since early February 2026
    RegulatorSector regulator for personal data under article 90 of the Digital Code
    AI policyAI rules in articles 191 to 197 of the Digital Code; Cabinet order on high-risk AI declarations (December 2025)
    Time zoneUTC+6 (India is 30 minutes behind)
    CurrencyKGS (Kyrgyz som)
    Business languageKyrgyz and Russian

    Why now

    Why Kyrgyzstan is worth watching

    Each point links to the document it comes from.

    • Parliament adopted the Digital Code on 18 June 2025, and the President signed it on 31 July 2025.[2]

    • The law putting the Code into effect was published on 5 August 2025 and set its start six months after publication.[2]

    • On that date the Code replaced the Law on Personal Information of 14 April 2008.[2]

    • A Cabinet of Ministers order of 31 December 2025 approved the form and content of declarations for high-risk AI systems.[3]

    • The same law told the Cabinet to create a National Digital Ecosystem and launch a factory of public services by 1 June 2026.[2]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    Digital Code, articles 191 to 194: AI risk assessment

    In force2025Every AI system used in Kyrgyzstan must have a risk assessment by its owner, at design, before use and after unplanned changes. The results and method must be published on the owner's website in plain language. Systems that raise the risk of harm to life, health, rights, the environment, defence, security or public order are high risk. Owners and users of all AI systems must take reasonable steps to reduce risk and are liable for harm.[1]

    Digital Code, articles 195 to 197: high-risk AI and disclosure

    In force2025Before using a high-risk AI system, the owner must adopt a declaration of conformity, sign it with a qualified digital signature and publish it. Users must follow the operating manual, keep logs and assign people to monitor the system. Anyone using AI to deal with consumers must tell them, unless it is obvious, and users of emotion recognition or biometric classification must inform the people concerned.[1]

    Digital Code, articles 79, 88 and 89: personal data

    In force2025Personal data may be processed on grounds such as a contract, a legal duty or legitimate interests (article 79). Organisations with more than ten staff must name a person responsible for personal data (article 88). Transfers to countries on the regulator's adequacy list cannot be restricted; other transfers need a ground such as consent or a contract that gives adequate protection (article 89).[1]

    Cabinet of Ministers order No. 1181-t of 31 December 2025

    In force2025It sets the required content and form of the declaration of conformity for high-risk AI systems. Owners of AI systems must make and publish the declaration before they start using a high-risk system.[3]

    Where AI fits first

    Where AI fits first

    Banking and microfinance

    Credit scoring support and customer service in Kyrgyz and Russian.

    Where an AI result is used for a decision that could affect people's rights, article 196 adds duties for users of high-risk systems. Assess the risk level first.[1]

    Retail and online services

    Chat assistants for orders and support.

    Article 197 requires telling consumers they are dealing with AI unless it is obvious.[1]

    Security and identity

    Face or emotion recognition at entrances or in stores.

    Users of emotion recognition or biometric classification systems must inform the people concerned under article 197.[1]

    Public services

    Assistants that help citizens use digital public services.

    The law putting the Code into effect set 1 June 2026 for creating the National Digital Ecosystem and a factory of public services.[2]

    Your first steps

    Your first steps

    1. List each AI system you use and run the risk assessment that article 193 requires, then publish the result and method on your website.
    2. If a system is high risk, prepare the declaration of conformity in the Cabinet's form, sign it with a qualified digital signature and publish it before use.
    3. Tell customers when they are talking to an AI system, and say on your website where you use AI.
    4. Name a person responsible for personal data if you have more than ten staff.
    5. Before sending personal data to a foreign AI service, check the regulator's adequacy list or use consent or a suitable contract.
    6. Keep logs for high-risk systems and assign staff to watch how they work.

    AI services for Kyrgyzstan

    AI consulting and development for teams in Kyrgyzstan

    We work remotely with companies in Kyrgyzstan, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. Kyrgyzstan is on UTC+6 and India on UTC+5:30, so India is 30 minutes behind. Taking a 9:00 to 18:00 day in Bishkek and 9:30 to 18:30 in India, the overlap is about 8 hours, from 10:00 to 18:00 Bishkek time.

    Questions

    Common questions about AI in Kyrgyzstan

    Does Kyrgyzstan have an AI law?

    AI is covered by the Digital Code of 31 July 2025 rather than a separate AI law. Articles 191 to 197 set rules on risk assessment, high-risk systems and telling people when AI is used.

    Is the Law on Personal Information still in force?

    No. The law that put the Digital Code into effect repealed it from the Code's start date, six months after publication on 5 August 2025. ICNL gives that date as 8 February 2026.

    What makes an AI system high risk?

    A system is high risk if, compared with other ways of doing the task, it raises the risk of harm to life, health, rights, the environment, defence, security or public order. A system used only in a supporting role that does not raise that risk is not high risk.

    Can I send personal data abroad?

    Yes to countries on the regulator's adequacy list. For other countries you need a ground in article 89, such as the person's consent or a contract that gives adequate protection.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] Ministry of Justice, Centralised Database of Legal Information, 2025-07-31. Digital Code of the Kyrgyz Republic of 31 July 2025(cbd.minjust.gov.kg)
      Full title and what we used it for

      Digital Code of the Kyrgyz Republic of 31 July 2025. Primary. Official text (Russian) read. Used for articles 79, 88 to 90 and 191 to 197.

    2. [2] Ministry of Justice, Centralised Database of Legal Information, 2025-07-31. Law No. 179 of 31 July 2025 on putting the Digital Code into effect(cbd.minjust.gov.kg)
      Full title and what we used it for

      Law No. 179 of 31 July 2025 on putting the Digital Code into effect. Primary. Used for the six-month start, publication in Erkin-Too on 5 August 2025, adoption on 18 June 2025, repeal of the 2008 Law on Personal Information and the 1 June 2026 ecosystem deadline.

    3. [3] Ministry of Justice, Centralised Database of Legal Information, 2025-12-31. Cabinet of Ministers order No. 1181-t of 31 December 2025 on declaratio…(cbd.minjust.gov.kg)
      Full title and what we used it for

      Cabinet of Ministers order No. 1181-t of 31 December 2025 on declarations for high-risk AI systems. Primary. Used for the declaration form and the duty to publish before use.

    4. [4] International Center for Not-for-Profit Law (ICNL), 2025-08-01. Kyrgyzstan personal data guidance note(icnl.org)
      Full title and what we used it for

      Kyrgyzstan personal data guidance note. Secondary guidance, used for interpretation only: the 8 February 2026 start date and the end of registration as a personal data holder.

    5. [5] Akchabar, 2025-08-04. The President signed the Digital Code: how it will affect life in digit…(akchabar.kg)
      Full title and what we used it for

      The President signed the Digital Code: how it will affect life in digital Kyrgyzstan. Press report. Used for the general scope of the Code (digital services, personal data, AI and telecom).

    6. [6] Ministry of Justice, Centralised Database of Legal Information, 2025-07-31. Law No. 179 of 31 July 2025, list of repealed acts(cbd.minjust.gov.kg)
      Full title and what we used it for

      Law No. 179 of 31 July 2025, list of repealed acts. Primary. Article 2, point 7 repeals the Law on Personal Information No. 58 of 14 April 2008.

    This is general information, not legal advice. We read the official Russian text, and our English wording may differ from official translations. The exact start date in February 2026 depends on how the six months are counted. Check with a qualified Kyrgyz lawyer before you act. Facts checked on 29 October 2026.

    Other country guides

    Starting with AI in Kyrgyzstan?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score