KazakhstanLaw on Artificial Intelligence, prohibited practices
Law No. 230-VIII (), Art. 17(3)
In force since .
An AI prohibited practices rule binding public and private bodies.
- How the hook was established
- express
- What makes it apply
- Place of effect
- Audit expectation
- none
What it requires
- Do not build or operate an AI system that uses subconscious or manipulative methods to distort a person's behaviour or coerce a harmful decision.NIST AI RMFMAP 3.3
- Do not build or operate an AI system that exploits a person's age, disability, social position or other vulnerability to cause or threaten harm.NIST AI RMFMAP 3.3
- Do not evaluate or classify people over time by their social behaviour or predicted personal traits, unless a Kazakhstani law provides for it.NIST AI RMFMAP 3.3
- Do not classify people by biometric data to infer race, political views, religion or similar traits for the purpose of discrimination.NIST AI RMFMAP 3.3
- Do not determine a person's emotions without their consent, unless a Kazakhstani law provides for it.NIST AI RMFMAP 3.3
- Do not create or distribute an AI-generated output that Kazakhstani law bans.NIST AI RMFGOVERN 1.1
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- GOVERN 1.1Legal and regulatory requirements involving AI are understood, managed, and documented.
- MAP 3.3Targeted application scope is specified and documented based on the system’s capability, established context, and AI system categorization.
Our reading of where this law's duties sit in each framework, and in the NIST AI RMF, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
What it makes you log
Logging duty
Article 17(3) is an outright ban on seven functional capabilities; it states no duty to log, record or document anything, and creates nothing a party would need to demonstrate or produce on demand.
- Kind
- None
- As of
What this law does
Article 17(3) bans creating or operating an AI system that has any of seven functional capabilities: using subconscious, manipulative or other methods that distort a person's behaviour and impair their ability to make an informed decision, or coerce a decision that could cause or threaten harm; exploiting a person's moral or physical vulnerability arising from age, disability, social position or other circumstance to cause or threaten harm; evaluating or classifying people over time by their social behaviour or known, presumed or predicted personal traits, except where a Kazakhstani law provides for it; collecting or processing personal data in violation of Kazakhstan's personal-data legislation; classifying people by biometric data to infer race, political views, religious affiliation or other criteria for the purpose of discrimination; determining a person's emotions without their consent, except where a Kazakhstani law provides for it; and creating or distributing AI-generated output that Kazakhstani law bans.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions or processes biometric data.
Back to the example · Lint your app
Page updated .