Binding law — in force AI-adjacent law
Legally significant decisions affecting rights and freedoms may not rely solely on AI conclusions (Uzbekistan Law on Informatization Art. 7-1)
Uzbekistan's Law ZRU-1115 of 21 January 2026, in force on its publication that day, inserted Article 7-1 into the Law on Informatization: when legally significant decisions concerning human rights and freedoms are taken, it is not permitted to rely solely on the conclusions of information resources created only with AI and of information systems working on AI technologies (second paragraph). AI is defined as a set of technological solutions that imitate human knowledge and skills, including independent learning and solution-seeking, and give results comparable to human intellectual activity (Art. 3, as amended). Detect a model output that becomes a decision about a person with no human decision or review before it takes effect.
Trust and provenance not reviewed by a lawyer · audit-grade · source verified 3 Oct 2026 · release 2026.10.03.3
- Lane
- Binding law — in force In force: applies since 21 Jan 2026
- Official source
- Law on Informatization Art. 7-1, second paragraph (legally significant decisions not based solely on AI) · captured 3 Oct 2026 · anchor hash (SHA-256)
6cce5d2b62db…· 3 more anchors in the data release - Verification
- Quoted text found word for word in the captured official document (3 Oct 2026). Source last verified 3 Oct 2026: checked against the captured official document; not in the weekly watcher's list; checked against the captured document.
- Data release
- Data release 2026.10.03.3, data as of 3 Oct 2026, schema 0.3.9.
- Legal review
- Not reviewed by a lawyer. TwinEthos derived this rule from the official text it cites: treat it as research to check against that text; it is not legal advice. No TwinEthos rule has been legally reviewed yet. Open questions for counsel on this rule: 1.
- Audit standard
- Audit-grade: meets all 10 checks of the TwinEthos audit standard that apply to it. The audit standard is TwinEthos's own quality bar for provenance, dates, applicability, detectors, fixtures, remediation and licences; it is not a legal review.
- Detectors
1 detector (data flow), experimental: written from the rule's text and not yet measured for precision on real code, so treat a hit as a lead to verify.
Known limits:
- Agent actions with legal effect taken through tools defined elsewhere
- A person may decide in a separate back-office step; decisions that are not legally significant are outside the rule.
Who it applies to
- Duty falls on: any person
- Systems covered: automated decision, consequential decision
- Anyone taking legally significant decisions concerning human rights and freedoms in Uzbekistan with information resources or systems based on AI. In force from 2026-01-21 (Art. 4: on official publication, which was on 21.01.2026). Whether the Law on Informatization's scope reaches private businesses' decisions, and what a 'legally significant' decision is, are counsel questions; the consolidated Law on Informatization was not captured.
- Whether it applies depends on facts outside the code; a person has to decide.
The guard to add
Route significant automated decisions through meaningful human review, or wire in an automated-decision notice, reasons, human intervention, a way to give a view, and contest.
At the point where model output becomes a significant decision about a person (approve, deny, underwrite, set_status), either queue the case for a reviewer who weighs the evidence and can change the outcome before it takes effect (review_queue.enqueue, requires_human_review), or, where the decision stays solely automated, record the permitted basis for that decision type and wire the safeguards in. Those safeguards are a notice in the decision message that it was made by automated processing, reasons the person can read, and request_human_review or contest routes where the person can give their view and have a human reconsider. A reviewer who approves every case without examining it does not make the decision non-automated, so the review records reviewer identity, the evidence viewed, and the outcome.
Where it goes: 1 application source code, 9 AI output handling, 15 agent action surface, 14 user-facing text.
What this provision adds:
- Have a person decide, or review and confirm, every legally significant decision about someone's rights before it takes effect; the AI output may inform but not alone ground the decision.
Example (Python + OpenAI SDK), before:
verdict = client.chat.completions.create(model=MODEL, messages=msgs).choices[0].message.content
if verdict.strip() == 'deny':
deny(applicant)
send_decision_email(applicant, 'Your application was not approved.')After:
out = client.chat.completions.create(model=MODEL, messages=msgs,
response_format={'type': 'json_object'})
result = json.loads(out.choices[0].message.content)
if result['decision'] == 'deny':
if requires_human_review('credit'): # a person decides
review_queue.enqueue(applicant.id, proposal=result)
else: # solely automated, recorded basis
deny(applicant, basis=DECISION_BASIS['credit'], reasons=result['reasons'])
send_decision_email(applicant, render('adm_denial.txt', notice=ADM_NOTICE,
reasons=result['reasons'], contest_url=f'{BASE}/decisions/{applicant.id}/contest'))Control: Solely-automated significant decision without human-intervention safeguards. The same guard addresses 15 items with binding law in 15 jurisdictions. Engineering guidance, not legal advice.
Related incidents
No guardrail sits on this exact control; these incidents are cited by guardrails on related controls.
- UnitedHealth nH Predict claim-denial litigation (2023-11; alleged (not proven)). A class action filed in November 2023 alleges that UnitedHealth's nH Predict model had a 90% error rate, measured by denials reversed on appeal, while only about 0.2% of members appealed. UnitedHealth disputes the allegations; the litigation is ongoing. Source: STAT News · evidence grade: primary · cited by Monitor how often adverse AI decisions are reversed, and suspend models that are usually wrong
- Cigna PXDX batch claim denials (reported) (2022; alleged (not proven)). ProPublica, citing internal Cigna records, reported that Cigna's PXDX system was used to reject more than 300,000 claims over two months in 2022, with physicians spending an average of 1.2 seconds on each. Cigna disputes the reporting; related lawsuits are ongoing. Source: ProPublica / The Capitol Forum · evidence grade: press of record · cited by Make human review of adverse AI decisions substantive, not nominal
Rule id uz-informatization-ai.no-legally-significant-decision-solely-on-ai · review status: primary source derived