Law / Kazakhstan

Penal Code, unauthorized access to information

Penal Code No. 226-V (3 July 2014), Art. 205

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

In force since 15 September 2025.

A computer misuse rule binding public and private bodies.

As of 6 September 2026.

What it requires

  • Do not intentionally access legally protected information on an electronic medium without authorization where doing so causes significant harm; the offence is not confined to defeating a technical access control.

If you get it wrong

Criminal exposureYes

Private right of actionNo

Criminal exposure note

A fine of up to 160 monthly calculation indices, correctional labour of the same amount, public works up to 160 hours, or arrest up to 40 days for the base offence (Art. 205(1)); up to 2,000 monthly calculation indices or imprisonment up to 2 years where the act causes grave consequences through negligence (Art. 205(3)).

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 205(1) punishes intentional unauthorized access to legally protected information held on an electronic medium, at an informatization object, that causes significant harm, with a fine up to 160 monthly calculation indices, correctional labour of the same amount, public works up to 160 hours, or arrest up to 40 days, plus an optional bar of up to 2 years from holding certain positions or engaging in certain activities.

Article 205(2) raises the penalty where the target is critically important information and communication infrastructure, and Article 205(3) raises it further where the act, under either paragraph, causes grave consequences through negligence, reaching a fine up to 2,000 monthly calculation indices or imprisonment up to 2 years.

The offence's trigger is unauthorized access to protected information causing significant harm; the text read does not require defeating a technical security measure, so it reaches unauthorized access more broadly than a security-circumvention-only standard would. The article's heading was reworded by Law No. 210-VIII (16 July 2025).

When LexLint raises it

  • crawls_web
  • trains_models

Read the law

Penal Code, official statute text, Adilet Legal Information System

Back to the example  ·  Lint your app