Topics

Topics are grouped into sections. Each topic lists the questions it should answer, the key provisions and the materials collected so far.

Foundations

What the law covers, key terms and principles, types of personal data.

Lawful processing

Consent and other grounds, purposes and retention, data subject rights.

Storage and transfer

Where data must be stored, when and to whom they may be passed on, how to delete or anonymise them.

Security

Protection measures, breaches, the responsible person, automated processing.

Oversight and liability

Notifying the regulator, state supervision, liability for violations.

Sector rules

Specific rules on personal data in particular sectors.

Comparison

Kazakhstan's rules compared with the GDPR.