In recent months, Kazakhstan’s digital legislation has undergone a comprehensive overhaul. The January enactment of the Law of the Republic of Kazakhstan ‘On Artificial Intelligence’ (the ‘AI Law’), amendments to the Law of the Republic of Kazakhstan ‘On Personal Data and Its Protection’ (the ‘Personal Data Law’), and the extensive codification of the sector through the Digital Code of the Republic of Kazakhstan have fundamentally changed the regulatory landscape.
An analysis of the new regulatory framework has revealed systemic inconsistencies in certain provisions. In attempting to address a wide array of issues, legislators have created several ‘grey areas’ in legal regulation. Below are some of the legal provisions that may pose risks to businesses.