In Kazakhstan, a list of personal data used by the courts is being determined
The Judicial Administration of the Republic of Kazakhstan has prepared a draft list of personal data that judicial authorities will be able to use in the exercise of their functions. At present, the document has been submitted for public discussion until 16 March 2026.
The draft is aimed at formalising and systematising approaches to the processing of personal data by the courts, as well as determining the information that is necessary and sufficient for the consideration of court cases and for ensuring the functioning of the judicial system.
What data the courts will be able to use
The draft list provides for the possibility of the courts using the following categories of personal data:
- information on natural persons and legal entities;
- identity data;
- employment information;
- information on financial standing;
- data on persons’ participation in legal proceedings;
- information on criminal and administrative liability;
- other personal data processed by the courts within the scope of their powers.
| According to the drafters’ intention, establishing such a list will make it possible to ensure clearer regulation of the courts’ work with personal data, as well as to increase the transparency of judicial procedures and the protection of the rights of participants in legal proceedings. |
Significance of the changes
The proposed list effectively enshrines, at the regulatory level, the volume of personal data that may be processed by the judicial authorities.
This is important for several reasons:
- it establishes legal certainty in matters relating to the processing of personal data by the courts;
- it reduces the risk of disputes regarding the lawfulness of the processing of certain categories of data;
- it increases the transparency and predictability of judicial procedures;
- it creates an additional legal basis for interaction between the courts and state authorities and information systems.
- It can also be expected that, in future, this list will be used as a benchmark in the development of digital judicial services and court information systems.
Practical conclusions for business
For companies, this initiative means the further development of regulation in the field of personal data processing and the digitalisation of the judicial system.
In particular:
- judicial authorities will receive clearer grounds for processing various categories of personal data of participants in proceedings;
- when court cases are considered, a broader body of information on natural persons and legal entities may be used;
- the importance of proper storage and management of personal data within companies is increasing, since such data may be used in litigation.
Recommendations
Companies are advised to:
- review their internal personal data processing policies for compliance with the laws of Kazakhstan;
- ensure the proper storage and documentation of personal data of employees, counterparties and clients;
- take into account the possible use of such data in legal proceedings;
- where necessary, conduct a legal audit of personal data processing, including the cross-border transfer and storage of information.
How our team can help
The REVERA Kazakhstan team has experience in supporting companies on matters relating to personal data protection, IT regulation and legal disputes.
We can:
- conduct an audit of a company’s compliance with personal data legislation;
- develop or update internal personal data processing policies;
- advise on issues relating to the lawful transfer, storage and processing of data;
- support legal proceedings related to the use of personal data;
- provide comprehensive legal support in the field of IT law, digital regulation and information protection.
Author: Alisher Kissamenov.
Contact a lawyer for further information
Contact a lawyer