Digest

A fortnightly overview of what changed in Kazakhstan personal data law, what comes into force soon, what is being prepared and what was in the news. Each issue links to primary sources.

Act now adopted rules and deadlines within 90 days
Worth noting drafts, guidance, practice
On the horizon plans and initiatives

Latest issue

Issue 112 – 18 October 2026

Digest for 12–18 October 2026

The Ministry of AI and Digital Development has been tasked with approving masking and hashing rules and keeping the registers of operators and breaches.
A standard on AI in schools bans automated grading and requires anonymisation.
After a Yandex outage, MPs asked for checks on cross-border transfers
The Credit Bureau Law changes on 21 October.

Findings: 6Read the issue →