Kazakhstan has enacted a new data protection law which is due to
come into force at the end of November. Ukraine has enacted
amendments to its data protection law which are due to come into
force in January 2014.
Kazakhstan's new data protection law, The Law of Republic of Kazakhstan No. 94-V,
"On Personal Data and Its Protection" (May 21, 2013)
(PDP), introduces a new regulatory framework governing how personal
data is collected, used, disclosed, transferred and destroyed, and
applies to the public sector, businesses and to individuals.
The PDP will require "database owners" and
"database operators" to create a list of the personal
data required for each purposes for which it will be processed, and
use of third parties to process data will only be permitted if they
are also subject to data protection requirements relevant to the
processing they will perform. Individuals must provide consent for
the processing of their data, except in certain limited
circumstances.
