Deputy Prime Minister – Minister of Artificial Intelligence and Digital Development of the Republic of Kazakhstan Zhaslan Madiyev reported at the Government session on planned measures to implement the provisions of the new Constitution of the Republic of Kazakhstan in the field of personal data protection.

He noted that the new Constitution of the Republic of Kazakhstan enshrines a provision aimed at ensuring the protection of citizens’ personal data. In particular, Article 21 of the Constitution states: “The right to privacy, personal and family confidentiality, and the protection of personal data from unlawful collection, processing, storage and use, including through the use of digital technologies, shall be guaranteed by law.”

In order to implement this provision, it is planned to introduce amendments and additions to a number of legislative acts, including the Code of Administrative Offenses, the Criminal Code, as well as the laws on personal data and cybersecurity.

Work will be carried out in two main areas. The first is organizational and technical measures. It предусматривает the introduction of modern tools for the protection of personal data, including data masking and hashing.

“This will make it possible to technically protect data and reduce the risk of disclosure in case of unauthorized access. It is planned to restrict the extraction of data from state databases. Priority will be given to the integration of information systems, while data extraction will be prohibited, except in certain cases strictly defined by law,” Zhaslan Madiyev explained.

The Minister added that, in order to streamline and account for personal data processed by both state bodies and the private sector, a register of personal data operators with their classification, as well as a register of trusted foreign recipients, will be created. Particular attention will be paid to further improving the level of cyber culture.

The second area is strengthening responsibility. To increase transparency and accountability to users, operators will be required to report personal data breaches both to the authorized body and to the citizens themselves, as well as notify the authorized body of the commencement of personal data processing.

In addition, the introduction of criminal liability for large-scale personal data breaches and an increase in the administrative fine threshold to up to 5,000 MCI are under consideration.

“All these measures will create a reliable system for the protection of personal data and increase responsibility for their processing, thereby strengthening public trust in digital services and state institutions,” Zhaslan Madiyev concluded.

#Government session #Ministry of Digital Development #President's instruction

• 
• 
• 
•