KZ-PDPL
Law on Personal Data and their Protection, No. 94-V
Authorised body for personal data protection
🇰🇿Kazakhstan
Skin
Kazakhstan overview
Kazakhstan's personal-data law is actively consolidated
Law No. 94-V of 21 May 2013 regulates personal data and its protection. The current Russian text on the official Adilet system is authoritative; Adilet's English page is an unofficial translation used as a reading aid.
Current-version boundary
The reviewed official consolidation includes amendments in force through the review date. Because Kazakhstan amends this statute frequently, organisations should check Adilet's change history before relying on a static PDF.
What this means for you
Maintain a necessary-and-sufficient data list, prove consent or an exception, publish internal processing and protection policies, appoint a responsible person where required, store personal-data databases in Kazakhstan, secure the data lifecycle and assess every cross-border transfer.