On 12 July 2026, the Digital Code of the Republic of Kazakhstan entered into force. This is the country’s first comprehensive legal framework governing digital rights, the use of artificial intelligence, data processing, and the development of digital infrastructure.
The Code establishes the legal foundation for large-scale digital transformation of the economy and public administration, moving Kazakhstan from isolated digital initiatives to a systematic regulation of the digital environment.
Key provisions for citizens
The Code grants citizens several new digital rights related to personal data processing.
Citizens now have the right to:
- manage their personal data;
- request deletion or anonymization of data;
- restrict data processing;
- request a review of decisions made by automated systems or AI algorithms.
Special attention is given to biometric data, which is now subject to stricter regulation aimed at increasing transparency and accountability of digital services.
New digital concepts
The Code formally introduces a number of digital concepts into legislation, including:
- digital documents;
- digital information and confirmations;
- push notifications and digital codes;
- digital records and assets;
- digital platforms;
- software;
- digital systems and digital infrastructure objects;
- digital data products.
This creates clearer rules for the use and circulation of digital assets in both the public and private sectors.
National digital objects
The Code introduces the concept of national digital objects.
Strategic digital systems that:
- perform government functions;
- are used to provide public services;
- support the stable operation of the state’s digital architecture,
may be classified as national digital objects.
The status of such objects will be established by separate laws of the Republic of Kazakhstan.
Smart contracts and digital data
The Code also creates a legal framework for:
- the use of smart contracts;
- distributed digital systems;
- exchange and circulation of digital data products.
Digital data exchange platform
A dedicated digital data exchange platform will provide:
- transparent access to digital products;
- clearly defined terms of use;
- legal and secure data circulation.
Platform owners will be required to maintain a high level of cybersecurity, prevent unauthorized access and data leaks, and comply with restrictions on cross-border data transfers.
Key provisions for business
For government bodies and quasi-public organizations, digital transformation becomes a mandatory process.
The requirements include:
- annual digital transformation programs;
- integration of transformation results into executives’ KPI systems;
- enhanced cybersecurity standards;
- accessibility of digital services for persons with disabilities.
For private businesses, the Code establishes clearer rules for working with data, digital platforms, and AI technologies, which is particularly important for companies actively implementing digital solutions.
Conclusion
The Digital Code represents one of the most significant milestones in the development of digital regulation in Kazakhstan. It affects not only the public sector but also a broad range of commercial organizations that process personal data, operate digital platforms, or use AI-based systems.
Companies should assess the impact of the new requirements on their internal processes, including data governance, cybersecurity, automated decision-making systems, and digital contractual mechanisms.
As digital transformation accelerates, timely adaptation to the new regulatory framework will become an important factor in ensuring business resilience and reducing compliance risks.
