Kazakhstan Warns of Fines for Misusing Personal Data

Kazakhstan is toughening penalties for using someone's personal data without their consent, with fines that can run into millions of tenge. The rule applies to anyone who collects, stores, or shares personal data without permission — whether a company or an individual.

The risk isn't limited to obvious data thieves: any business that keeps client contacts, staff files, or correspondence without properly documented consent can be held liable. Personal data today is scattered across CRM systems, inboxes, spreadsheets, and messengers, and it's often unclear who is handling it and on what basis.

Check whether your company has written consent from clients and employees for processing their data, and confirm who actually has access to those records. Role-based access and a protected data environment in 1Cifer narrow the circle of people who can see client and employee personal data, cutting this exposure.