Kazakhstan’s Parliament is currently considering changes to the law on the protection of personal data. One notable amendment involves the formation of electronic services to ensure personal data protection. The service will enable data subjects to give and revoke their consent for data collection and processing. Operators will be able to send a notice through the service and after receiving consent from the data subject, will receive access to personal data. Moreover, the platform will also allow data subjects to file complaints to the authorized body in case of a violation of their rights. What are the other noteworthy amendments introduced in the draft law and their possible consequences for businesses operating in Kazakhstan?
