Although the law is a set of amendments, its core provisions form a coherent regulatory framework.
5.1. Definition and guiding principles
The law introduces an official legal definition of AI as technologies capable of analyzing data, learning, and assisting decision-making without direct human input, and it outlines the principles of state policy in this field.
5.2. Human oversight and prohibition of harm
- the use of AI systems or AI-generated information resources that could harm life, health, dignity, or other fundamental rights;
- making decisions affecting individual rights solely on the basis of AI-generated outcomes.
This codifies a form of human-in-the-loop requirement similar to emerging global standards.
5.3. Mandatory labelling of AI-generated content
All content produced with the help of AI—images, videos, audio, text—must be clearly labeled. The principal aim is to limit deception and reduce the circulation of deepfakes.
5.4. Personal data and administrative liability
The law introduces liability for:
- unlawful processing of personal data using AI;
- misconduct involving dissemination of such data online or through mass media;
- failure to comply with labelling requirements.
According to regional media (e.g., Liter. kz), penalties may include:
- fines of 50−100 basic calculation units;
- up to 15 days of administrative arrest;
- confiscation of equipment used in violations.
5.5. Institutional structure
The amendments identify a specially authorized national body for AI development, tasked with:
- attracting investment into AI;
- creating technical infrastructure, including data centers and AI-based government platforms;
- overseeing specialist training, retraining, and professional development.
Together, these measures connect regulatory oversight with the country’s broader digitalization agenda.