{"faq_id":"5ad9c7e2-8225-4e82-9818-d154d06d263e","code":"life-personal-data-leaked","kind":"faq","canonical_slug":"life-personal-data-leaked","section":{"id":15,"code":"rights","slug":"rights","title":"Rights"},"lang":"en","question":"My Personal Data Was Leaked – What Should I Do","short_answer":"The Constitution protects personal data against unlawful collection, processing, storage, and use, including with digital technologies. If your data are leaked, preserve evidence, contact the data operator, and submit a complaint to the Information Security Committee.","blocks":{"answer_html":"<h2>What the Constitution Protects</h2>\n<p>Article 21 protects personal data against unlawful collection, processing, storage, and use, including with digital technologies. Consent, other lawful grounds for processing, retention periods, biometric data, and deletion procedures are governed by specific legislation.</p>\n<h2>What to Do When Data Are Leaked</h2>\n<ol>\n<li><strong>Preserve evidence:</strong> screenshots, page addresses, messages from the organisation, the date, and the circumstances of discovery.</li>\n<li><strong>Contact the data owner or operator:</strong> request an explanation, cessation of unlawful processing, and deletion or correction where the law provides for it.</li>\n<li><strong>Submit a complaint through eOtinish to the authorised body:</strong> supervision is handled by the Information Security Committee of the Ministry of Artificial Intelligence and Digital Development.</li>\n<li><strong>Provide verifiable details:</strong> the organisation or person involved, the circumstances of the violation, and available evidence. These are needed for an unscheduled inspection or administrative proceedings.</li>\n<li><strong>Contact law enforcement</strong> if there are signs of fraud, extortion, unlawful access, or another crime.</li>\n<li><strong>Go to court</strong> if you need the violation stopped or proven harm compensated.</li>\n</ol>\n<p>The Constitutional Court reviews not the leak itself, but the constitutionality of a legal norm that directly affects your rights. The citizen application mechanism has operated since 2023.</p>\n<p><a href=\"https://www.gov.kz/memleket/entities/maidd/activities/9552?lang=ru&amp;parentId=6\">Authorised body guidance</a></p>\n","facts_html":"<ul>\n<li>Processing is allowed with consent or another lawful basis</li>\n<li>The authorised body is the Information Security Committee</li>\n<li>A complaint needs concrete circumstances and supporting materials</li>\n<li>Deletion or correction may be requested where and as provided by law</li>\n<li>If there are signs of a crime, contact law enforcement</li>\n</ul>\n","what_not_change_html":"","where_detailed_html":"","misconceptions_html":""},"updated_at":"2026-06-16T00:00:00+00:00","article_refs":[{"number":21,"title":"Digital Rights"}],"entity_links":[{"type":"constitutional_article","number":21,"label":"Article 21","title":"Digital Rights","href":"/full-text?lang=en#article-21"}],"source_records":[{"id":"constitution-2026-official","type":"constitution","url":"https://adilet.zan.kz/rus/docs/K2600000000","title":"Official publication of the 2026 Constitution of the Republic of Kazakhstan","publisher":"Adilet Legal Information System","checked_at":"2026-07-16","reviewed_at":"2026-07-16","checked_at_label":"16 July 2026"},{"id":"personal-data-law-2013","type":"legal_code","url":"https://adilet.zan.kz/rus/docs/Z1300000094","title":"Law on Personal Data and Their Protection","publisher":"Adilet Legal Information System","checked_at":"2026-07-16","reviewed_at":"2026-07-16","checked_at_label":"16 July 2026"},{"id":"personal-data-authority-guidance","type":"regulator_guidance","url":"https://www.gov.kz/memleket/entities/maidd/activities/9552?lang=ru&parentId=6","title":"Authorised body guidance on personal-data protection","publisher":"Ministry of Artificial Intelligence and Digital Development of Kazakhstan","checked_at":"2026-07-16","reviewed_at":"2026-07-16","checked_at_label":"16 July 2026"}],"verified_claims":[],"implementation_status":null,"source_schema_records":[{"@type":"CreativeWork","name":"Official publication of the 2026 Constitution of the Republic of Kazakhstan","url":"https://adilet.zan.kz/rus/docs/K2600000000","publisher":{"@type":"Organization","name":"Adilet Legal Information System"},"dateModified":"2026-07-16"},{"@type":"CreativeWork","name":"Law on Personal Data and Their Protection","url":"https://adilet.zan.kz/rus/docs/Z1300000094","publisher":{"@type":"Organization","name":"Adilet Legal Information System"},"dateModified":"2026-07-16"},{"@type":"CreativeWork","name":"Authorised body guidance on personal-data protection","url":"https://www.gov.kz/memleket/entities/maidd/activities/9552?lang=ru&parentId=6","publisher":{"@type":"Organization","name":"Ministry of Artificial Intelligence and Digital Development of Kazakhstan"},"dateModified":"2026-07-16"}],"source_citation_urls":["https://adilet.zan.kz/rus/docs/K2600000000","https://adilet.zan.kz/rus/docs/Z1300000094","https://www.gov.kz/memleket/entities/maidd/activities/9552?lang=ru&parentId=6"]}