Kazakhstan’s New AI Draft Law: From Concept to Regulation

​Current Legal Framework

Until now, AI in Kazakhstan has been governed only indirectly under the Law on Informatisation (2015). This statute introduced the concept of the “intelligent robot” and the idea of a national AI platform, but it left major gaps: no provisions for risk management, liability, or compliance obligations. For businesses, this meant relying on general data protection and consumer protection rules rather than any AI-specific obligations.

 

The Draft AI law (2025)

In early 2025, Kazakhstan’s Parliament introduced two draft laws:

• Law on Artificial Intelligence (28 articles)
• Amendments to Legislative Acts on AI (covering personal data, consumer rights, mass media, and informatisation laws)

 

These drafts are Kazakhstan’s first real attempt to create a dedicated AI regulatory framework. They are shorter and less prescriptive than the EU AI Act but draw inspiration from its risk-based structure.

 

Fast-track timeline

AI legislation is not just on the agenda — it is a top priority. In September 2025, the President instructed Parliament to fast-track laws on digitalization, with the AI Law and the Digital Code among those to be passed by the end of 2025. A special parliamentary committee has already been tasked with coordinating this work.

Key milestones so far

• 2015: Law on Informatisation introduced AI-related concepts.
• Early 2025: Draft AI Law and companion amendments submitted to Parliament.
• May 2025: Draft AI Law approved in its first reading by the Mazhilis (lower house).
• September 2025: Parliament instructed to fast-track adoption by year-end.

 

What the Draft Law Covers

The proposed AI Law introduces definitions and principles, as well as new protections tied to personal data.

 

Concepts and Definitions

• Defines “artificial intelligence,” “AI system,” and “generative AI.”
• Focuses primarily on the role of the user, unlike the EU AI Act which distinguishes between providers, importers, deployers, etc.

 

Objectives and Principles

• Promote AI innovation and adoption.
• Embed transparency, fairness, equality, controllability, and safety.
• Give less emphasis than the EU AI Act to human rights and fundamental freedoms.

 

Personal Data Safeguards

• Right to object to automated processing.
• Duty to explain the use and consequences of AI-driven decisions.
• Ban on decisions made solely by AI if they significantly affect individuals, unless based on consent or legal grounds.
• Prohibition of fully autonomous AI systems that exploit vulnerabilities of individuals.

 

Comparison to the EU AI Act: Same inspiration, different tune

Kazakhstan’s draft law is leaner and less detailed than the EU model, but the influence is clear.

• Scope: Kazakhstan emphasizes innovation, while the EU focuses on fundamental rights.
• Structure: Fewer stakeholder categories, simpler definitions.
• Detail: Many implementation rules will be delegated to future regulations, leaving some uncertainty for now.

 

For international companies, this means Kazakhstan is taking a convergent but lighter approach — closer in spirit to the EU than to other major AI markets.

 

Don't get caught off guard!

Even though the law is still in draft, the fast-track process means new obligations could arrive by late 2025. Companies active in Kazakhstan should prepare by:

• Reviewing how AI is used in their operations, especially where personal data or automated decision-making is involved.
• Building transparency practices (clear user notices, explanations of outcomes).
• Conducting bias checks and embedding safeguards for vulnerable groups.
• Strengthening data protection, security, and vendor management processes.
• Monitoring closely for sector-specific rules that may follow the core AI Law.

 

The road ahead

Kazakhstan is moving quickly: within one year, it has gone from draft concepts to a likely AI Law and Digital Code by year-end 2025. Subordinate regulations will be crucial to fill in the details, but the direction is set — AI governance is now a priority.

 

Nemko Digital: Your Fast-track partner

Kazakhstan’s rapid pace means businesses cannot afford to wait. Nemko Digital supports organizations by:

• Tracking draft laws and subordinate regulations as they move through Parliament.
• Running pre-compliance assessments to highlight gaps in transparency, accountability, and data protection.
• Advising on alignment between Kazakhstan’s framework and the EU AI Act for companies operating cross-border.
• Building governance frameworks so AI systems remain trustworthy and compliant once the law takes effect

 

Contact Nemko Digital today to ensure your AI systems are ready for Kazakhstan’s upcoming regulatory shift in 2025.