New Personal Data Protection Law


On 21 May 2013, the Parliament of the Republic of Kazakhstan adopted the Law “On Personal Data” (the “Personal Data Law”), which entered into force on 25 November 2013.

The Personal Data Law affects all commercial and non-commercial legal entities in Kazakhstan, including governmental agencies, which collect, store and use personal information in relation to the individuals in their operations.

The Personal Data Law might be of the particular interest to Kazakhstan banks which transfer personal data collected from their customers who are private individuals to locations outside of Kazakhstan and process such information by using processing centers in foreign countries.

All entities affected by the Personal Data Law must bring their internal regulations into compliance with the requirements of the Personal Data Law within 3 months from the date it entered into force, i.e., by 25 February 2014.

Please see full alert below for more information.

LOADING PDF: If there are any problems, click here to download the file.