My Personal Data Was Leaked – What Should I Do
The Constitution protects personal data against unlawful collection, processing, storage, and use, including with digital technologies. If your data are leaked, preserve evidence, contact the data operator, and submit a complaint to the Information Security Committee.
What the Constitution Protects
Article 21 protects personal data against unlawful collection, processing, storage, and use, including with digital technologies. Consent, other lawful grounds for processing, retention periods, biometric data, and deletion procedures are governed by specific legislation.
What to Do When Data Are Leaked
- Preserve evidence: screenshots, page addresses, messages from the organisation, the date, and the circumstances of discovery.
- Contact the data owner or operator: request an explanation, cessation of unlawful processing, and deletion or correction where the law provides for it.
- Submit a complaint through eOtinish to the authorised body: supervision is handled by the Information Security Committee of the Ministry of Artificial Intelligence and Digital Development.
- Provide verifiable details: the organisation or person involved, the circumstances of the violation, and available evidence. These are needed for an unscheduled inspection or administrative proceedings.
- Contact law enforcement if there are signs of fraud, extortion, unlawful access, or another crime.
- Go to court if you need the violation stopped or proven harm compensated.
The Constitutional Court reviews not the leak itself, but the constitutionality of a legal norm that directly affects your rights. The citizen application mechanism has operated since 2023.
Key facts
- Processing is allowed with consent or another lawful basis
- The authorised body is the Information Security Committee
- A complaint needs concrete circumstances and supporting materials
- Deletion or correction may be requested where and as provided by law
- If there are signs of a crime, contact law enforcement
Public positions and documents
An editorial selection showing how the topic developed and where it stands now.
-
«В новой Конституции Казахстана впервые закреплено право на защиту персональных данных, четко прописан запрет на незаконный сбор, обработку и использование сведений, в том числе с применением цифровых инструментов.»
-
«Он отметил, что еще одной ключевой особенностью нового текста Конституции является ориентация на права человека. Так, права и свободы человека закреплены не только в новой Преамбуле, но и утверждены в качестве особого приоритета и смыслового стержня всей Конституции.»
Basis for this explainer
Constitutional provisions and primary sources supporting this explanation.
Constitutional provisions
Primary sources
Open sources the editorial team used to verify this explainer. Checked 16 July 2026.
Related articles
Quick links to the constitutional articles behind this explainer.