The Republic of Kazakhstan has established a legal and institutional framework for the regulation of artificial intelligence (AI). This framework encompasses statutory requirements for AI system safety and auditing (Articles 18 and 20 of the Law of the Republic of Kazakhstan “On Artificial Intelligence”), a designated authorized government body, and a specialized unit within that body- the Department of Artificial Intelligence and Data Management.
Legal Basis for AI System Assessment
Article 100 of the Digital Code of the Republic of Kazakhstan establishes a framework for quality audits of digital objects. Paragraph 4 specifically addresses AI systems, requiring assessment of the quality and lawful use of data libraries employed to train AI models, as well as the presence of any prohibited functional capabilities.
These requirements are further developed in the Law of the Republic of Kazakhstan “On Artificial Intelligence” (hereinafter, the AI Law). The Law adopts a risk-based classification of AI systems - minimal, medium and high risk and establishes obligations for owners of high-risk systems. In particular, Article 17 prohibits AI systems from being used for covert behavioral manipulation, social scoring and emotion recognition without the individual’s consent, subject to statutory exceptions. In addition, AI legislation requires synthetic (AI-generated) content to be labelled in a machine-readable format.
Taken together, the Digital Code and the AI Law provide a comprehensive legislative basis for assessing AI systems, covering the lawful use of data, algorithmic transparency and mandatory content labelling.
Digital Code of the Republic of Kazakhstan — Article 100
Government Mandate for AI Safety
The AI Law establishes requirements for the safety and security of AI systems under Article 11, risk management under Article 18, and AI system audits under Article 20.
These provisions implement a risk-based approach that distinguishes between minimal-, medium- and high-risk systems. High-risk AI systems must undergo an independent audit before they can be included in the lists of trusted AI systems.
The assessment process is integrated with the Digital Code, which provides the overarching framework for quality audits of digital objects. Article 13 of the AI Law defines the powers of the authorized body, encompassing strategic, regulatory, implementation and oversight functions. AI safety is therefore an integral element of government regulation, supported by defined administrative mechanisms, institutional responsibilities and accountability requirements for market participants.
Law of the Republic of Kazakhstan “On Artificial Intelligence”
The Ministry as the Authorized Government Body
The Regulations approved by Resolution No. 846 of the Government of the Republic of Kazakhstan, dated 9 October 2025, assign leadership and cross-sectoral coordination in the field of AI to the Ministry of Artificial Intelligence and Digital Development of the Republic of Kazakhstan.
The Ministry is the government institution responsible for exercising statutory powers relating to AI regulation, including the safe deployment and use of AI systems.
Its responsibilities also include approving criteria for classifying AI systems by risk level, maintaining lists of trusted AI systems, administering the National Artificial Intelligence Platform, and overseeing compliance with AI legislation.
The Department as a Specialized Unit within the Government’s AI Governance Structure
The Ministry includes a dedicated Department of Artificial Intelligence and Data Management. Its establishment ensures that AI and data governance functions are supported by a specialized unit within the authorized government body.
The Department’s involvement in implementing the AI regulatory framework is evidenced by Order No. 482/НҚ of 13 August 2026. Under paragraph 2 of the Order, the Department is responsible for arranging the state registration and official publication of the rules governing the interaction of the National Artificial Intelligence Platform operator, and for reporting on the completion of these procedures.
The Department’s institutional role encompasses methodological support as well as operational regulatory coordination. It oversees the operator’s organizational and technical activities, coordinates the functioning of the National Artificial Intelligence Platform, and facilitates developers’ access to government computing resources and verified datasets. In this capacity, the Department serves as a key implementation component of the government’s AI regulatory framework, supporting the Ministry in carrying out its assigned functions.
Regulatory act confirming specific responsibilities of the Department
Practical Mechanism for Conducting Audits
Order No. 432/НҚ of 23 July 2026 approved the Rules for Conducting Quality Audits of Digital Objects. These Rules establish the procedural framework for implementing the audit mechanism provided for under Article 100 of the Digital Code.
The framework clearly distinguishes regulatory rule-making from the performance of audits. The Ministry approves the applicable rules within its statutory remit, while audits are conducted by independent individuals and legal entities with the necessary specialized knowledge and professional experience.
Rules for Conducting Quality Audits of Digital Objects
Accordingly, the Department of Artificial Intelligence and Data Management operates as a specialized unit of the authorized government body and an institutional component of Kazakhstan’s national framework for AI regulation. Its role is closely connected with statutory requirements concerning AI safety, risk management and independent audits of AI systems.