On approval of the Rules of Operation and connection to the national biometric authentication system

Home / Order / On approval of the Rules of Operation and connection to the national biometric authentication system

Order of the Deputy Prime Minister - Minister of Artificial Intelligence and Digital Development of the Republic of Kazakhstan dated April 30, 2026 No. 225/NK. Registered with the Ministry of Justice of the Republic of Kazakhstan on May 4, 2026 No. 38650

In accordance with paragraph 5 of Article 48 of the Digital Code of the Republic of Kazakhstan, I ORDER:

1. To approve the attached Rules of Operation and connection to the national biometric authentication system.

2. The Department of Digital Solutions of the Ministry of Artificial Intelligence and Digital Development of the Republic of Kazakhstan, in accordance with the procedure established by law, shall ensure:

1) the state registration of this order in the Ministry of Justice of the Republic of Kazakhstan;

2) posting of this order on the Internet resource of the Ministry of Artificial Intelligence and Digital Development of the Republic of Kazakhstan after its official publication;

3) within ten working days after the state registration of this order with the Ministry of Justice of the Republic of Kazakhstan, submit to the Legal Department of the Ministry of Artificial Intelligence and Digital Development of the Republic of Kazakhstan information on the implementation of measures provided for in subparagraphs 1) and 2) of this paragraph.

3. Control over the execution of this order is entrusted to the supervising Vice Minister of Artificial Intelligence and Digital Development of the Republic of Kazakhstan.

4. This order will enter into force on July 12, 2026 and is subject to official publication.

Deputy Prime Minister – Minister of Artificial Intelligence and Digital Development of the Republic of Kazakhstan

J. Madiev

Approved by the Order of the Deputy Prime Minister - Minister of Artificial Intelligence and Digital Development of the Republic of Kazakhstan on April 30, 2026 No. 225/NK

Rules of functioning and connection to the national biometric authentication system

Chapter 1. General provisions

1. These Rules of Operation and Connection to the national biometric authentication system (hereinafter referred to as the Rules) have been developed in accordance with paragraph 5 of Article 48 of the Digital Code of the Republic of Kazakhstan and define the procedure for functioning and connection to the national biometric authentication system.

2. The following concepts are used in these Rules:

1) initiator of integration interaction (hereinafter referred to as initiator) is the owner and/or owner of a digital object that initiates connection to the national biometric authentication system when digitizing the activities of a government agency, including the implementation of government functions and the provision of public services;

2) the national biometric authentication system (hereinafter referred to as the national system) is a digital object of the "digital government" designed for biometric authentication based on a person, the creation, development, maintenance and system maintenance of which is carried out by the operator of the "digital government".

3) the digital government operator (hereinafter referred to as the operator) is a legal entity designated by the Government that ensures the functioning of digital government facilities;

4) a digital system (hereinafter referred to as a digital system) is a functionally connected complex of digital resources that uses digital infrastructure facilities to create, collect, process, store and distribute digital data, as well as automate the interaction of subjects of the digital environment and (or) provide services in the digital environment.

Chapter 2. The procedure for the functioning of the national biometric authentication system

3. The functioning of the national system includes the collection, use, storage and destruction of biometric data collected in the national system.

4. Collection includes obtaining a person's biometric data, taking into account his consent to the collection and processing of personal data in accordance with the Rules for the Collection and Processing of Personal Data, approved by Order No. 395/NK of the Minister of Digital Development, Innovation and Aerospace Industry of the Republic of Kazakhstan dated October 21, 2020 (registered in the Register of State Registration of Regulatory Legal Acts under No. 21498) (further - Rules for the collection and processing of personal data), Rules for the implementation by the owner and (or) operator, as well as by a third party of measures to protect personal data, approved by Order of the Minister of Digital Development, Innovation and Aerospace Industry of the Republic of Kazakhstan dated June 12, 2023 No. 179/NK (registered in the Register of State Registration of Regulatory Legal Acts No. 32810), the Rules governing the determination by the owner and (or) operator of the list of personal data necessary and sufficient for the performance of their tasks, approved by the Order of the Minister of Digital Development, Innovation and Aerospace Industry of the Republic of Kazakhstan dated June 21, 2023 No. 199/NK (registered in the Register of State Registration of Regulatory Legal Acts under No. 32889).

5. Based on the results of the collection of biometric data of a person in the national system, a reference image of the face is formed.

6. The process of using a reference image of a face from the national system includes the stages of initial and subsequent comparison and transmission of this image.

7. In the process of biometric authentication, when comparing with a reference image of a face from the national system, in order to prevent substitution, a procedure is carried out to verify the authenticity of the current image of the face, which includes automated analysis of the video stream to identify signs of inconsistency, including signs of the use of fake, static or prerecorded images and (or) video materials.

8. The procedure for verifying the authenticity of the current face image is carried out using the technical and software tools of the national system and involves consistent recording of attempts to pass biometric authentication.

9. The initial comparison of images in the national system is based on biometric data obtained from the State Database "Individuals" or the Unified Information System "Berkut" (hereinafter referred to as digital systems), subsequent image comparison is carried out using reference images from the national system.

For the initial comparison of images, the current image of the face and identity documents from digital systems are used for identification purposes.

10. After the biometric authentication procedure is completed, information about the successful or unsuccessful biometric authentication is transmitted to the initiator via an electronic message.

11. Biometric data obtained from digital systems and/or generated as a result of processing a reliable image of a person is subject to storage and/or destruction after obtaining the consent of the person to collect and process personal data in accordance with the Rules for the Collection and Processing of Personal data.

Chapter 3. The procedure for connecting to the national biometric authentication system

12. In order to gain access to the national system, the initiator forms an application for connection to the national biometric authentication system (hereinafter referred to as the application) through the Digital Government web portal (sb.egov.kz ) (hereinafter referred to as the web portal) in accordance with Appendix 1 to these Rules, and sends it to the operator for consideration and decision-making on connection to the national system.

13. Upon receiving notification of the need to view the application through the web portal, the Operator sends a response to the application within two (2) business days.

In case of detection of incompleteness and unreliability of the information specified in the application, the operator sends a reasoned conclusion on the refusal of integration for repeated access on the web portal.

14. In case of approval of the application, the operator provides the initiator with access to the test environment of the national system for integration testing within 10 (ten) business days.

15. The initiator, together with the operator, conducts integration testing within a period of no more than 3 (three) months until a positive result is obtained.

16. In case of a positive test result, the initiator forms an act of testing and commissioning in accordance with Appendix 2 to these Rules, certifies it with an electronic digital signature of an authorized person and sends it to the operator for approval.

If the result is negative, integration testing continues until a positive result is obtained.

17. Upon receipt of the application and the act of testing and commissioning, the Operator shall approve this act by means of an electronic digital signature within 3 (three) business days.

If the test result is negative, the operator returns the test and commissioning report for revision to the initiator.

The initiator shall finalize the act of testing and commissioning within no more than 3 (three) business days and resend it to the operator for review.

The re-examination of the application and the act of testing and commissioning is carried out by the operator within 3 (three) business days.

In case of positive approval of the act of testing and commissioning, the operator sends the initiator a draft contract for connection to the national system within no more than 3 (three) business days.

Access to the national system is provided to the initiator by the operator within 10 (ten) business days from the date of conclusion of the contract for connection to the national system.

Appendix 1 to the Rules of Functioning and connection to the national biometric identification system

Application for connection to the national biometric authentication system

Download

Initiator of integration interaction

1. Name of the organization (required)

2. IIN/BIN (required)

3. The official responsible for the operation (required to fill in)

The digital system of the initiator of integration interaction

1. Name of the digital system (required)

2. Redirect URI, applied after successful authentication (required)

3. A link to the user agreement of the digital system of the initiator of integration interaction (required)

4. Link to the privacy policy of the digital system of the initiator of the integration interaction (required)

5. Logo (optional)

Date "___" _______________ 20__ The authorized person of the initiator of integration interaction___________________________________________________________( signature) last name, first name, patronymic (if any)

Appendix 2 to the Rules of Functioning and connection to the national biometric identification system

The act of testing and commissioning

Download

1. The operator of the "digital government"

2. Name of the initiator of the integration interaction (required)

3. Digital system of the Digital Government operator (required)

4. Digital system of the initiator of integration interaction (required)

5. Conclusion (required)

6. Test scenario (required)

7. Decision based on the test results (required)

8. Date of commissioning (required)

Constitution Law Code Standard Decree Order Decision Resolution Lawyer Almaty Lawyer Legal service Legal advice Civil Criminal Administrative cases Disputes Defense Arbitration Law Company Kazakhstan Law Firm Court Cases Declaration Decree Order Resolution Decision Report Conclusion Statement Conclusion Convention Contract Memorandum Methodology Norms Note Rules Program Charter Charter Article Commentary Resolution Regulations Protocol Draft Program Rules Messages