AI Regulation Tracker / Statute in force
Kazakhstan's Digital Code takes effect and regulates AI as an "algorithmic system"
Kazakhstan's Digital Code (No. 255-VIII) enters into force on or around July 10, 2026, six months after its first official publication. It is binding law. It governs AI under the label "algorithmic system," and it is separate from Kazakhstan's standalone AI Law that took effect in January.
Start with the thing people keep getting wrong. Kazakhstan now has two separate AI-relevant laws, and they are not the same instrument. The standalone Law "On Artificial Intelligence" took effect on January 18, 2026. The Digital Code, No. 255-VIII, is a different and much broader statute, and it is the one taking effect now. Do not merge their provisions or their dates. This briefing is about the Digital Code.
What the Digital Code actually does
The Code regulates AI without leaning on the term. Its operative category is the "algorithmic system." Article 46 defines it directly. In the official Russian, an algorithmic system is a "цифровая система, принимающая либо влияющая на принятие решений на основе автоматизированной обработки данных, включая системы искусственного интеллекта." In plain English: a digital system that makes, or influences the making of, decisions based on automated data processing, including artificial intelligence systems. Framing AI as a subset of automated decision systems is a deliberate choice. It means the rules bite whether or not a vendor calls its product "AI."
Three obligations carry the most weight for anyone deploying these systems. First, AI-quality audits are linked to the training data. The Code ties the assessment of an AI system to the quality and the lawfulness of the data libraries it was trained on, so provenance is now a compliance question, not just an engineering one. Second, a person who is subject to an automated decision has information rights about that decision. Third, data localization applies, which shapes where the underlying data can live and be processed.
The effective date, and the discrepancy to know about
Article 106 is short and controls the timing. It reads: "Настоящий Кодекс вводится в действие по истечении шести месяцев после дня его первого официального опубликования." The Code enters into force upon the expiry of six months after the day of its first official publication. First publication was in Kazakhstanskaya Pravda on January 10, 2026. Six months out puts the effective date on or around July 10, 2026.
Here is the honest caveat. Counting "six months after" a January 10 publication is not perfectly mechanical, and some English-language secondary sources report the date as July 9 or July 11 rather than July 10. The primary text fixes the rule, not a calendar date, so the precise day can shift by a day depending on how the term is computed. Treat it as on or around July 10, 2026, and if a filing or contract turns on the exact day, confirm it against the promulgated Russian text.
Why a US professional should track this
The reach is not limited to Kazakh companies. If you build or deploy an algorithmic system that makes or influences decisions about people or data in Kazakhstan, the Code applies to that activity. For US firms with Central Asian operations, partners, or customers, the near-term work is concrete. Map which of your systems meet the "algorithmic system" definition. Document the provenance and lawfulness of the training data behind them, because the audit regime keys on exactly that. Build the mechanism that tells an affected person how an automated decision was made. And check where your data physically sits against the localization rule.
There is a wider signal too. Kazakhstan is running two tracks at once, a dedicated AI law and a broad Digital Code that regulates AI through automated-decision rules. That layered approach is worth watching, because other jurisdictions weighing how to slot AI into existing digital and data law may borrow the pattern.
Questions professionals are asking
Is the Digital Code the same as Kazakhstan's AI Law?
No. They are two separate statutes. The Law "On Artificial Intelligence" took effect on January 18, 2026. The Digital Code, No. 255-VIII, is a broader instrument that enters into force on or around July 10, 2026. Keep their provisions and dates apart.
When exactly does the Digital Code take effect?
Article 106 sets it at six months after first official publication. Publication was January 10, 2026, so the effective date is on or around July 10, 2026. Some English secondaries say July 9 or 11, so confirm the exact day against the official Russian text if it is material.
How does the Code regulate AI?
It regulates AI as an "algorithmic system," defined as a digital system that makes or influences decisions through automated data processing, including AI systems. It ties AI-quality audits to the quality and lawfulness of training-data libraries, grants information rights to people subject to automated decisions, and applies data localization.
RELATED BRIEFINGS
Browse the full AI Regulation News tracker
Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel in the relevant jurisdiction.