Law enforcement to gain access to travel data of Kazakh passengers

Tengrinews.kz – Starting August 31, information about airline, train, and sea passengers in Kazakhstan will be automatically shared with law enforcement agencies, according to new regulations introduced by the Ministry of Transport.
What the new rules mean
The updated order amends passenger data transfer rules first adopted in 2015. Officials say the measures are aimed at ensuring transport and aviation security, preventing terrorist acts, and combating transnational organized crime.
Airlines, rail operators, and ticket vendors will now be required to record and transfer:

full name;type and number of ID document;departure date, time, and route;passenger’s contact details (phone or email) — with consent.

For air travel, the list is broader and includes:

flight number, arrival and departure times;nationality, date of birth, gender;seat and baggage tag numbers;ticket and payment details;transit points and booking changes.

Rail operators will transmit information five times a day via the “Express” automated system, while maritime transport providers must submit data up to four times daily depending on schedules.
How the data will be transmitted
All information will be fed into a state information system integrated with law enforcement and security agencies. Transfers will take place automatically and be timestamped according to Astana time.
Authorities emphasized that all processing will comply with Kazakhstan’s personal data protection laws. The data will be stored for five years.
Oversight and background
Implementation of the new order will be overseen by the Deputy Minister of Transport, while the Civil Aviation Committee is responsible for official registration and publication.
Previously, only limited passenger data was shared. The new system significantly expands the scope and unifies requirements across all modes of transport.
The Ministry noted that the system is designed with "'the protection of citizens' rights, confidentiality, and security of personal data” as guiding principles.