The country has approved the procedure for conducting audits of state bodies and their subordinate organizations regarding compliance with personal data protection legislation. The corresponding decree was signed by Cabinet of Ministers Chairman Adylbek Kasymaliev.

Essence and objectives of the control

The new regulation was adopted based on Article 90 of the Digital Code of the Kyrgyz Republic. It creates a legal framework for monitoring how government institutions handle data they receive and use within their activities. The main task of the audits is to ensure control over compliance with legal requirements when processing the population's personal information.

Implementation conditions

According to the document, the implementation of the new requirements will not require additional costs from the republican budget. All activities will be conducted within the framework of existing funding and the approved staff numbers of the agencies.

At the same time, the published text of the decree does not disclose the details of the procedures, the specific powers of the inspectors, or the measures that will be applied in case of violations.

Context

The adopted decree repeals the previous document (No. 158 dated March 22, 2023), which regulated the control over the use of data obtained by state bodies and local self-government bodies from other data holders.