Kazakhstan's Labor Code amendments from August: cybersecurity, hiring refusals and employee privacy

Kazakhstan's er10 published a breakdown of the Labor Code amendments that took effect in August 2026. Three topics concern practically every employer: workplace cybersecurity requirements, the grounds and procedure for refusing employment, and the protection of employees' private life.

The overall direction matches the global one: the boundary between work and personal life in the digital environment is becoming a subject of regulation. An employer now needs to understand what it may demand from staff on security, how to properly document a refusal to a candidate, and where permissible monitoring of employees ends. Each of these points is a potential labor dispute — and the side with its documents in order wins it.

The practical step for a company in Kazakhstan is a scheduled audit of the HR perimeter: employment contracts, job descriptions, the information security policy and the rules for processing employee data. New tools deserve a separate check: if AI sorts candidate CVs or automated systems process staff correspondence, those processes must fit the updated norms just as a human HR officer's actions do.