The security of data and the protection of privacy are among the most significant challenges facing local and international businesses. At KPMG Law, we have access to global knowledge resources and extensive experience in data privacy compliance and legal risk management. We offer clients comprehensive assistance in ensuring compliance with data privacy regulations from a legal perspective.

In collaboration with KPMG's technology advisory practice, we provide privacy compliance checks to help clients identify existing non-compliance risks. Additionally, we provide guidance to businesses on how to navigate various regulatory requirements and assist them in their interactions with data protection authorities.

Over the past few years, there has been an increasing interest from foreign information companies in Kazakhstan, and the development of information technology has resulted in changes to the Kazakhstan law in the field of information technology and personal data to meet the needs of businesses. The KPMG Law team in Kazakhstan is well-equipped to guide clients through the data protection legislation in Kazakhstan. Our lawyers are well-versed in IT legislation and informational protection, as well as cross-border data transfer, cloud storage ability, etc.

Our recent experience includes:

  • Legal advisory services in connection with the planned introduction of a system for collecting and processing biometric and personal data in the course of interaction between the National Bank of the Republic of Kazakhstan, the Ministry of Internal Affairs of the Republic of Kazakhstan, the National Security Committee of the Republic of Kazakhstan, and participants of the financial services market.
  • Legal due diligence of Kazakh IT companies in connection with the planned acquisition of shares by the parent company in Russia.
  • Legal advisory services for the National info communication holding "Zerde" in connection with the development of the platform "electronic akimat."
  • Legal advisory services related to the transfer of personal data to cloud services for Wolt.