Data Leaks: Majilis Deputy Calls for Stronger Oversight

cover Photo: DALL-E, AI Generated, Ill. purposes

Majilis Deputy Abutalip Mutali has called on Minister of Artificial Intelligence and Digital Development Zhaslan Madiyev to take stronger action to protect the personal data of Kazakhstan’s citizens, Orda.kz reports.

According to Mutali, despite ongoing efforts, online fraud remains a serious issue in the country:

Personal information is being misused, from the illegal collection and sale of data to fraud with bank cards, loans, and online services. All measures taken by the state are ineffective. People are accumulating legitimate grievances against government agencies. The head of state has repeatedly addressed this issue.

He pointed to the June 2025 data breach, when the personal information of more than 16 million Kazakhstanis became publicly available, as an alarming example.

Mutali also emphasized that similar risks exist not only in state systems but also in banks, telecom operators, marketplaces, and retail chains, which collect vast amounts of data through loyalty programs and mobile applications.

In 2025, authorities registered over 14,000 cases of online fraud, a 22% increase from the previous year. Damages exceeded six billion tenge, with pensioners, young people, and socially vulnerable groups among the most affected.

Mutali argued that current penalties under the Criminal Code and the Code of Administrative Offenses are insufficient, since large companies often prefer paying small fines instead of investing in real data protection measures.

He proposed aligning Kazakhstan’s approach with international standards:
In the EU, fines for GDPR violations reach €20 million or 4% of annual turnover; in China, up to 50 million yuan or 5% of turnover; and in Australia, up to 50 million Australian dollars or 30% of the company's revenue. This approach effectively prevents further violations.

The deputy called on the government to:

  • Increase penalties for data leaks to match international levels
  • Audit and test all government and quasi-state IT systems for vulnerabilities
  • Ensure ongoing oversight of the implementation of protective measures

Original Author: Artyom Volkov

Latest news

view all