Kazakhstan Law on Personal Data and Their Protection (No. 94-V)
Kazakhstan's Law on Personal Data and Their Protection (No. 94-V, 2013, significantly amended 2023) establishes the data protection framework. The Committee on Information Security of the Ministry of Digital Development oversees enforcement. Key provisions include consent requirements, data subject rights, data localisation for certain categories, cross-border transfer restrictions, and data protection officer requirements. Amendments in 2023 strengthened rights and introduced breach notification obligations.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (8)
KZ PDPL Authorized Body + Notification
| Code | Title |
|---|---|
| KZ-PDPL-Authorized-Body-Notification-Article27-29-Ministry-Digital-Development-State-Service-Information-Security | Kazakhstan PDPL Authorized Body Notification + Articles 27-29 + Ministry of Digital Development + State Service for Information Security + Breach Notification 72-Hour + Operational Notification + AIFC Coordination + KNB Committee Coordination |
KZ PDPL Biometric Localization
| Code | Title |
|---|---|
| KZ-PDPL-Biometric-Data-Localization-Article12-Server-Kazakhstan-On-Soil-Data-Storage-Citizens-Residents | Kazakhstan PDPL Biometric Data Localization + Article 12 + Mandatory Server Storage in Kazakhstan + 2022 Amendment + Citizens + Residents + Foreign Cloud Provider Restrictions + Data Sovereignty + State Service for Information Security Oversight |
KZ PDPL Cross-Border Transfer
| Code | Title |
|---|---|
| KZ-PDPL-Cross-Border-Transfer-Article16-Adequacy-Consent-Public-Interest-Contract-Authorized-Body-Approval | Kazakhstan PDPL Cross-Border Transfer + Article 16 + Adequacy + Consent + Public Interest + Contract + Authorized Body Approval + EAEU/CIS Coordination + Russia Coordination + Sovereign Risk Considerations |
KZ PDPL Data Subject Rights
| Code | Title |
|---|---|
| KZ-PDPL-Data-Subject-Rights-Articles24-26-Access-Correction-Erasure-Object-Portability-30-Days-Free | Kazakhstan PDPL Data Subject Rights + Articles 24-26 + Right to Information + Access + Correction + Erasure + Restriction + Object + Portability (Recent Amendments) + 30-Day Response Timeline + Free of Charge + Refusal Grounds Limited |
KZ PDPL Lawful Basis + Consent
| Code | Title |
|---|---|
| KZ-PDPL-Standard1-Lawful-Basis-Consent-Article7-8-Contract-Legal-Vital-Public-Interest-Statutory-Authority | Kazakhstan PDPL Lawful Basis + Consent + Articles 7-8 + Contract Performance + Legal Obligation + Vital Interests + Public Interest + Statutory Authority + Documented Consent + Form Requirements |
KZ PDPL Scope + Application
| Code | Title |
|---|---|
| KZ-PDPL-Scope-Application-Article1-3-Law-94-V-21-May-2013-Republic-Kazakhstan-Ministry-Digital-Development-State-Service-Information-Security | Kazakhstan PDPL Scope + Application + Articles 1-3 + Law No. 94-V of 21 May 2013 + 2017 + 2019 + 2022 Amendments + Republic of Kazakhstan + Ministry of Digital Development Innovation and Aerospace Industry + State Service for Information Security + AIFC Astana International Financial Centre Exemption |
KZ PDPL Sensitive Data
| Code | Title |
|---|---|
| KZ-PDPL-Sensitive-Personal-Data-Article9-Special-Categories-Race-Religious-Political-Health-Genetic-Biometric | Kazakhstan PDPL Sensitive Personal Data + Article 9 + Special Categories + Race + Ethnic Origin + Religious + Political + Trade Union + Sexual Life + Criminal + Health + Genetic + Biometric + Enhanced Written Consent + Special Safeguards |
KZ PDPL Training + Penalties
| Code | Title |
|---|---|
| KZ-PDPL-Training-Awareness-Penalties-Articles31-32-Administrative-Article79-Civil-Compensation-Criminal-CoAP | Kazakhstan PDPL Training + Awareness + Penalties + Articles 31-32 + Code of Administrative Offences (CoAP) Article 79 + Administrative KZT 500K-30M + Civil Compensation + Criminal Code Articles 147-148 + Up to 3 Years Imprisonment + KZT 1.5M Fine |
Frequently Asked Questions
What is Kazakhstan Law on Personal Data and Their Protection (No. 94-V)?
Kazakhstan Law on Personal Data and Their Protection (No. 94-V) is a compliance framework from Kazakhstan with 8 domains and 8 controls. Kazakhstan's Law on Personal Data and Their Protection (No. 94-V, 2013, significantly amended 2023) establishes the data protection framework. The Committee on Information Security of the Ministry of Digital Development oversees enforcement. Key provisions include consent requirements, data subject rights, data localisation for certain categories, cross-border transfer restrictions, and data protection officer requirements. Amendments in 2023 strengthened rights and introduced breach notification obligations. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
How many controls does Kazakhstan Law on Personal Data and Their Protection (No. 94-V) have?
Kazakhstan Law on Personal Data and Their Protection (No. 94-V) has 8 controls organised across 8 domains. The largest domains are KZ PDPL Authorized Body + Notification (1 controls), KZ PDPL Biometric Localization (1 controls), KZ PDPL Cross-Border Transfer (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
What frameworks does Kazakhstan Law on Personal Data and Their Protection (No. 94-V) map to?
Kazakhstan Law on Personal Data and Their Protection (No. 94-V) does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I get started with Kazakhstan Law on Personal Data and Their Protection (No. 94-V) compliance?
Start your Kazakhstan Law on Personal Data and Their Protection (No. 94-V) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Kazakhstan Law on Personal Data and Their Protection (No. 94-V) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 8 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.
Get Started Free →Free forever — no credit card required