On January 9, 2026, the Digital Code of the Republic of Kazakhstan, No. 255-VIII ZRK, was adopted. It entered into force on July 12, 2026. For the first time, the Code systematically regulates work with digital data, electronic documents, digital technologies, artificial intelligence, and digital security issues.
Why is this important for non-profit organizations?
Almost every NPO works with personal data: storing information about employees, volunteers, program participants, and beneficiaries, maintaining electronic databases, using cloud services, social media, and digital signatures.
Organizations need to clearly understand: what data they collect; for what purposes; where this data is stored; and who has access to it.
What should they pay special attention to?
Personal data protection; security of electronic databases and cloud services; correct use of digital signatures; data transfer to third-party services and neural networks;
publication of photographs and information about program participants.
Digital security is an integral part of the responsible work of any NPO today. Even if an organization does not specialize in IT, it is obliged to comply with the rules for handling personal data and digital services.
Important: The Digital Code applies in conjunction with other regulations, including personal data legislation.