Law on Artificial Intelligence, prohibited practices
Law No. 230-VIII (17 November 2025), Art. 17(3)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force 8 months, effective 17 January 2026.
An AI prohibited practices rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not build or operate an AI system that uses subconscious or manipulative methods to distort a person's behaviour or coerce a harmful decision.
- Do not build or operate an AI system that exploits a person's age, disability, social position or other vulnerability to cause or threaten harm.
- Do not evaluate or classify people over time by their social behaviour or predicted personal traits, unless a Kazakhstani law provides for it.
- Do not classify people by biometric data to infer race, political views, religion or similar traits for the purpose of discrimination.
- Do not determine a person's emotions without their consent, unless a Kazakhstani law provides for it.
- Do not create or distribute an AI-generated output that Kazakhstani law bans.
What it reaches
How the hook was established
express
What makes it apply
Place of effect
What it makes you log
Logging duty
Article 17(3) is an outright ban on seven functional capabilities; it states no duty to log, record or document anything, and creates nothing a party would need to demonstrate or produce on demand.
- Kind
- None
- As of
- 22 September 2026
Who checks it
Audit expectation
none
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 17(3) bans creating or operating an AI system that has any of seven functional capabilities: using subconscious, manipulative or other methods that distort a person's behaviour and impair their ability to make an informed decision, or coerce a decision that could cause or threaten harm; exploiting a person's moral or physical vulnerability arising from age, disability, social position or other circumstance to cause or threaten harm; evaluating or classifying people over time by their social behaviour or known, presumed or predicted personal traits, except where a Kazakhstani law provides for it; collecting or processing personal data in violation of Kazakhstan's personal-data legislation; classifying people by biometric data to infer race, political views, religious affiliation or other criteria for the purpose of discrimination; determining a person's emotions without their consent, except where a Kazakhstani law provides for it; and creating or distributing AI-generated output that Kazakhstani law bans.
When LexLint raises it
high_risk_decisionsprocesses_biometricsautomated_outreach
Read the law
Law on Artificial Intelligence, official statute text, Adilet Legal Information System
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.