IT companies will have new obligations starting from July 1, 2024

According to regulations that will take effect on July 1, 2024, IT companies in Kazakhstan will be required to notify the owner of personal data about a breach of their rights in the event of a data leak.

On December 11, 2023, the Law of the Republic of Kazakhstan "On Amendments and Additions to Certain Legislative Acts of the Republic of Kazakhstan on Issues of Information Security, Informatization, and Digital Assets" No. 44-VIII was adopted.

Starting from July 1, 2024, companies that collect, process, store, and perform other operations with the personal data of Kazakhstani citizens will be required to report security breaches related to personal data to the Center for Monitoring and Regulation of Information and Communication Technologies of the Republic of Kazakhstan within one working day.

Source: astanahub.com