Legal Alert - May 2023

Dear readers,

Since 6 May 2023, by Order No. 157/НҚ of the Minister of Digital Development, Innovation and Aerospace Industry of the Republic of Kazakhstan dated 18 April 2023, amendments have been made to the Rules for the collection and processing of personal data¹.

According to the amendments, the following clauses are excluded from the Rules for the collection, processing of personal data, regulating that:

• The retention period of personal data is determined by the date of achievement of the purposes of their collection and processing, unless otherwise provided by the legislation of the Republic of Kazakhstan;
• The owner and (or) the operator changes and (or) supplements personal data on the basis of relevant documents confirming their authenticity within one business day;

• The dissemination of personal data is allowed in case of the consent of the subject or his legal representative, also if the legitimate interests of other individuals and (or) legal entities are not affected.

Also clauses regarding the issues of depersonalization of personal data for statistical, sociological, scientific, marketing research and procedures for blocking and destroying personal data are excluded.