Article 27-1. Competence of the authorized body of the Law on Personal Data and Their Protection

Home / Laws / Article 27-1. Competence of the authorized body of the Law on Personal Data and Their Protection

1. The authorized body within its competence:

1) formulates and implements the state policy in the field of personal data and their protection;

1-1) carries out state control over compliance with the legislation of the Republic of Kazakhstan on personal data and their protection;

2) develops the procedure for the implementation of personal data protection measures by the owner and (or) the operator, as well as by a third party;

2-1) develops rules for determining by the owner and (or) operator the list of personal data necessary and sufficient for the performance of their tasks;

2-2) determines the procedure for determining by the owner and (or) the operator the list of personal data necessary and sufficient for the performance of their tasks.;

2-3) determines the procedure for the implementation of personal data protection measures by the owner and (or) the operator, as well as by a third party;

3) considers the requests of the subject or his legal representative on the compliance of the content of personal data and methods of their processing with the purposes of their processing and makes an appropriate decision.;

4) takes measures to bring persons who have committed violations of the legislation of the Republic of Kazakhstan on personal data and their protection to responsibility established by the laws of the Republic of Kazakhstan;

5) requires the owner and/or operator, as well as a third party, to clarify, block or destroy false or illegally obtained personal data;

6) implements measures aimed at improving the protection of the rights of subjects;

6-1) establishes an advisory council on personal data issues and their protection, as well as determines the procedure for its formation and activities;

6-2) sends information to the operator of the digital infrastructure of the "digital government" about a violation of the security of personal data, entailing a risk of violation of the rights and legitimate interests of subjects, for the purposes provided for by this Law and other regulatory legal acts of the Republic of Kazakhstan;

7) approves the rules for the collection and processing of personal data;

7-1) Approves the rules for conducting a security survey of the processes of storing, processing and distributing personal data of limited access contained in electronic information resources, in coordination with the National Security Committee of the Republic of Kazakhstan

7-2) approves the rules of operation of the state service for access control to personal data;

7-3) coordinates the integration of non-governmental informatization facilities with the informatization facilities of state bodies and (or) state legal entities, in which personal data is transferred and (or) access to personal data is provided;

7-4) approves the rules for integration with the state service for access control to personal data;

8) exercise other powers provided for by this Law, other laws of the Republic of Kazakhstan, acts of the President of the Republic of Kazakhstan and the Government of the Republic of Kazakhstan.

2. With respect to personal data that has become known to the authorized body in the course of its activities, the confidentiality of personal data must be ensured.

The Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V.

This Law regulates public relations in the field of personal data, as well as defines the purpose, principles and legal basis of activities related to the collection, processing and protection of personal data.

President

Republic of Kazakhstan

Constitution Law Code Standard Decree Order Decision Resolution Lawyer Almaty Lawyer Legal service Legal advice Civil Criminal Administrative cases Disputes Defense Arbitration Law Company Kazakhstan Law Firm Court Cases