Personal data regulation has always been an issue for foreign investors in Kazakhstan. Nevertheless, the local Government is advancing in this field of legislation to comply with the strict rules of protecting personal data prescribed by GDPR (General Data Protection Regulation).
Prior to the collection and processing of the personal data, the owner and/or operator must fill in the form to determine the list of data that is required to perform their tasks;
Apart from the owner and operator, third parties are entitled to determine the list of individuals having access to the restricted personal data;
The owner and/or operator must notify the Ministry of Digital Development, Innovation and Aerospace Industry on unlawful access incidents to restricted personal data;