New Decree Defines The Scope Of Kazakhstan's State Electronic Database

At the end of February, the Government of the Republic of Kazakhstan enacted Decree No. 117, providing that the types of personal data to be stored in the state's electronic database are:

• Full names and addresses of data subjects
• Birth dates and birth places
• Nationality and citizenship
• Gender and family status
• Individual identification numbers and digital photos
• Signatures
• Identification document information

Kazakhstan enacted its framework data protection law, Law No. 94-V, in 2013, introducing comprehensive regulation of personal data processing for the first time. Compliance with the law is supervised by the State Prosecutors' Office, and penalties can include both fines and custodial sentences. The passage of this new Decree shows that state bodies are treating the protection of personal data seriously, so organisations should ensure that they are acting in compliance with Kazakhstan's regime.