26.03.2026 13:04:00
Дата публикации
Kazakhstan has begun implementing the norms of the new Constitution related to personal data protection.
Deputy Prime Minister – Minister of Artificial Intelligence and Digital Development Jaslan Madiev stated that Article 21 of the Constitution guarantees citizens the right to privacy and protection of personal data from unlawful collection and use.
To achieve this, amendments are planned to the Administrative Code, the Criminal Code, and the laws on personal data and cybersecurity.
The first area of work involves organizational and technical measures. Modern protection methods, including data masking and hashing, are being introduced.
It is also planned to restrict data exports from state databases, prioritizing system integration. Exceptions will be strictly defined by law.
To systematize, a registry of personal data operators and a registry of trusted foreign recipients will be created. Raising the level of cyber culture will be an important element.
The second area concerns responsibility. Operators will be obliged to notify both the authorized body and citizens about data leaks. They must also inform the authorized body when starting personal data processing.
There is consideration of introducing criminal liability for mass leaks and raising administrative fines up to 5000 MRP.
According to Madiev, these measures aim to build a more reliable regulatory system and strengthen public trust in digital services and state institutions.
Deputy Prime Minister – Minister of Artificial Intelligence and Digital Development Jaslan Madiev stated that Article 21 of the Constitution guarantees citizens the right to privacy and protection of personal data from unlawful collection and use.
To achieve this, amendments are planned to the Administrative Code, the Criminal Code, and the laws on personal data and cybersecurity.
The first area of work involves organizational and technical measures. Modern protection methods, including data masking and hashing, are being introduced.
It is also planned to restrict data exports from state databases, prioritizing system integration. Exceptions will be strictly defined by law.
To systematize, a registry of personal data operators and a registry of trusted foreign recipients will be created. Raising the level of cyber culture will be an important element.
The second area concerns responsibility. Operators will be obliged to notify both the authorized body and citizens about data leaks. They must also inform the authorized body when starting personal data processing.
There is consideration of introducing criminal liability for mass leaks and raising administrative fines up to 5000 MRP.
According to Madiev, these measures aim to build a more reliable regulatory system and strengthen public trust in digital services and state institutions.
