Kazakhstan to strengthen personal data protection

Kazakhstan to strengthen personal data protection

The protection of citizens’ personal data will be enshrined in the new Constitution of Kazakhstan. The provision is aimed at ensuring the inviolability of private life, personal and family privacy, as well as protection against the unlawful collection, processing, storage, and use of information. To implement this, amendments and additions to the current legislation are planned. In particular, the changes will affect the Code of Administrative Offenses, the Criminal Code, as well as laws on personal data and cybersecurity. The work will be carried out in two key areas. First, the introduction of modern data protection technologies is envisaged, including masking and hashing. Second, liability for companies and personal data operators will be strengthened. They will be required to notify authorized bodies and citizens of data breaches, as well as inform about the commencement of personal data processing.

«To streamline and account for personal data processed by both government agencies and the private sector, the following will be established: a register of personal data operators with their classification, as well as a register of trusted foreign recipients. Particular attention will be given to further enhancing the level of cyber culture. In addition, the introduction of criminal liability for mass personal data leaks is being considered, along with raising the administrative fine threshold to up to 5,000 monthly calculation indicessaid Kazakh Deputy Prime Minister, Minister of Artificial Intelligence and Digital Development Zhaslan Madiyev.