Kazakhstan Tightens Data Protection Laws Amidst Financial Sector Leaks
Kazakhstan is set to fortify its data protection laws, with Deputy of Mazhilis Ekaterina Smyshlyaeva revealing impending regulations for banking activity and digital environments. The move comes as data leaks surge, with 43 incidents registered in the financial sector since January 2025.
Currently, the primary legislative norms governing data breaches in Kazakhstan are Article 205 of the Criminal Code and Article 79 of the Code of Administrative Offenses. However, experts concur that more needs to be done to encourage investment in technologies to bolster cybersecurity. A roundtable in Almaty addressed these issues, stressing the need to toughen legislation and certify cryptographic information protection means (CIP) for state security.
The roundtable, titled 'Cryptography and Personal Data', was held in response to the rising number of data leaks. It gathered experts like Iskander Tajibekov, Deputy Chairman of the Information Security Committee of MCRIAP, and Eugene Pitolin, co-chairman of Alliance QazTech's information security committee. They underscored the importance of certification due to export restrictions and to distinguish between civilian and non-civilian CIP. The discussion also covered data encryption, legislation, and digital sandboxes for testing innovative solutions.
With 43 cases of personal data breaches registered in the financial sector this year, Kazakhstan is taking steps to enhance its data protection laws. The upcoming regulations aim to regulate banking activity and digital environments, while experts call for stricter legislation and investment incentives to boost cybersecurity.
