Legal framework for data processing in Big Data and artificial intelligence ecosystems: development of a national regulatory model in the Republic of Kazakhstan

The rapid development of Big Data and artificial intelligence technologies is transforming traditional approaches to the legal regulation of data processing. In the context of digital ecosystems, the classical model of personal data protection no longer covers the entire information lifecycle, including the preparation of training datasets, algorithmic processing, the use of synthetic data, and the functioning of artificial intelligence systems. The article examines the specific features of the formation of the national data governance regulatory model in the Republic of Kazakhstan and compares it with the risk-based approach of the European Union enshrined in the EU AI Act. The study substantiates that the modern legal regime for data should be constructed as a comprehensive regulatory system encompassing objective, subjective, procedural, and institutional levels. An original integrated model of the legal regime for data is proposed, based on the differentiation between personal data, training datasets, synthetic data, and the results of algorithmic processing. It is concluded that there is a need to establish special procedures for auditing high-risk AI systems, assessing their impact on human rights, and implementing mechanisms of algorithmic transparency. The practical significance of the study lies in the development of proposals for improving the legislation of the Republic of Kazakhstan in the field of artificial intelligence and data circulation.

1. Floridi L. (2023) The Ethics of Artificial Intelligence. Oxford University Press. DOI: 10.1093/oso/9780190905033.001.0001 (In English)

2. Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). URL: https://eur-lex.europa.eu (accessed: 10.01.2026) (In English)

3. Mantelero A. (2024) Artificial Intelligence and Data Protection: Challenges and Opportunities // Computer Law & Security Review. DOI: 10.1016/j.clsr.2024.105781 (In English)

4. Kuner C. (2024) Transborder Data Flows and Data Governance in the Age of Artificial Intelligence // International Data Privacy Law. DOI: 10.1093/idpl/ipad035 (In English)

5. Jasandy intelekt turaly: Qazaqstan Respublikasynyñ Zañy 2025 jylğy 17 qaraşadağy No. 230-VIII QRZ. // İnformasionno-pravovaia sistema «Ädılet». URL: https://adilet.zan.kz/rus/docs/Z2500000230 (ötınış berılgen kün: 10.01.2026) (In Kazakh)

6. OECD Digital Economy Outlook 2023. OECD Publishing. URL: https://www.oecd.org (accessed: 16.02.2026) (In English)

7. Floridi L., Cowls J. (2022) A Unified Framework of Five Principles for AI in Society // Harvard Data Science Review. DOI: 10.1162/99608f92.8cd550d1 (In English)

8. Veale M., Borgesius F. (2021) Demystifying the Draft EU Artificial Intelligence Act // Computer Law Review International. DOI: 10.9785/cri-2021-0401 (In English)

9. Bryson J. (2023) Artificial Intelligence Governance and the Rule of Law // Science and Engineering Ethics. DOI: 10.1007/s11948-023-00373-2 (In English)

10. Crawford K. (2021) Atlas of AI. Yale University Press. DOI: 10.2307/j.ctv1ghv45t (In English)

11. Cath C., Wachter S., Mittelstadt B. (2024) Artificial Intelligence and the Law // Nature Machine Intelligence. DOI: 10.1038/s42256-024-00611-z (In English)

12. Kitchin R. (2022) Big Data, New Epistemologies and Paradigm Shifts // Big Data & Society. DOI: https://doi.org/10.1177/20539517221082574 (In English)

13. Hildebrandt M. (2022) Smart Technologies and the End(s) of Law. Edward Elgar Publishing. DOI: https://doi.org/10.4337/9781789908787 (accessed: 23.03.2026) (In English)

14. European Commission. EU Justice Scoreboard 2024. URL: https://commission.europa.eu (accessed: 29.03.2026) (In English)

15. UNCITRAL Technical Notes on Online Dispute Resolution. URL: https://uncitral.un.org (accessed: 29.03.2026) (In English)

16. Qazaqstan Respublikasy Ükımetınıñ 2024–2029 jyldarğa arnalğan jasandy intelekttı damytu tūjyrymdamasyn bekıtu turaly: Qazaqstan Respublikasy Ükımetınıñ 2024 jylğy 24 şıldedegı No. 592 qaulysy. Astana, 2024. (In Kazakh)

17. Erezhepқyzy R. (2025) Jekologicheskaja migracija: mezhdunarodno-pravovye osnovy, cifrovye instrumenty upravlenija i praktika Kazahstana // Journal of Actual Problems of Jurisprudence (Habarşy. Zañ seriasy). V. 116. No. 4. P. 78–89. (In Russian)

18. Nūrğalym Q.S. jäne t.b. (2026) Sifrlyq tehnologialardyñ qūqyqtyq retteluı: jasandy intelekt jäne derbes derekterdı qorğau // Vestnik KazNPU imeni Abaja. Serija: Mezhdunarodnaja zhizn’ i politika. V. 1. No. 84. P. 45–57. (In Kazakh)

19. Amantay A., Nurmagambetov A.M., Akhpanov A.N. (2025) Jasandy intelekt qūraldaryn qoldanu tūtynuşylardyñ sot törelıgıne qoljetımdılıgın qamtamasyz etu ädısı retınde // Scientific and Legal Journal «Bulletin of the Institute of Legislation and Legal Information of the Republic of Kazakhstan». Vol. 80. No. 3. P. 112–124. (In Kazakh)

20. Shoshaeva L., Amanbaeva A. (2023) Iskusstvennyj intellekt kak pravovaja kategorija // QEU Jarşysy: Jekonomika, filosofija. No. 4. P. 99–105. (In Russian)